diff options
| author | Bernhard Liebl <Bernhard.Liebl@gmx.org> | 2018-01-03 21:08:44 +0100 |
|---|---|---|
| committer | Bernhard Liebl <Bernhard.Liebl@gmx.org> | 2018-01-03 21:12:58 +0100 |
| commit | df84ecd043425be441c8788a0b696071fc5ddd2c (patch) | |
| tree | d4baeca290d177cd09abb5ca986365545a3428e7 | |
| parent | 2488aff93f93deda27c99cf4811986afeb973438 (diff) | |
Checks on input_buffer in PacketPeerStream
| -rw-r--r-- | core/io/packet_peer.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/core/io/packet_peer.cpp b/core/io/packet_peer.cpp index 472f6296d2..7e09036171 100644 --- a/core/io/packet_peer.cpp +++ b/core/io/packet_peer.cpp @@ -164,6 +164,7 @@ Error PacketPeerStream::_poll_buffer() const { ERR_FAIL_COND_V(peer.is_null(), ERR_UNCONFIGURED); int read = 0; + ERR_FAIL_COND_V(input_buffer.size() < ring_buffer.space_left(), ERR_UNAVAILABLE); Error err = peer->get_partial_data(&input_buffer[0], ring_buffer.space_left(), read); if (err) return err; @@ -215,6 +216,7 @@ Error PacketPeerStream::get_packet(const uint8_t **r_buffer, int &r_buffer_size) uint32_t len = decode_uint32(lbuf); ERR_FAIL_COND_V(remaining < (int)len, ERR_UNAVAILABLE); + ERR_FAIL_COND_V(input_buffer.size() < len, ERR_UNAVAILABLE); ring_buffer.read(lbuf, 4); //get rid of first 4 bytes ring_buffer.read(&input_buffer[0], len); // read packet |