VUL: fix some possible buffer overruns

12 years ago · 369b090e38
parent 39ed446e15
commit 369b090e38
1 changed files with 6 additions and 0 deletions
--- a/libxrdp/xrdp_mcs.c
+++ b/libxrdp/xrdp_mcs.c
@ -385,6 +385,12 @@ xrdp_mcs_recv_connect_initial(struct xrdp_mcs *self)
        return 1;
    }

+    if (!s_check_rem(s, len))
+    {
+        free_stream(s);
+        return 1;
+    }
+
    /* make a copy of client mcs data */
    init_stream(self->client_mcs_data, len);
    out_uint8a(self->client_mcs_data, s->p, len);