epee: basic sanity check on allocation size from untrusted source

Reported by guidov
release-v0.14
moneromooo-monero 5 years ago
parent 3395de2e7f
commit b873b69ded
No known key found for this signature in database
GPG Key ID: 686F07454D6CEFC3

@ -136,6 +136,7 @@ namespace epee
//for pod types
array_entry_t<type_name> sa;
size_t size = read_varint();
CHECK_AND_ASSERT_THROW_MES(size <= m_count, "Size sanity check failed");
sa.reserve(size);
//TODO: add some optimization here later
while(size--)

Loading…
Cancel
Save