fix buffer overflow if slen = 32.
authorGustavo Sverzut Barbieri <gustavo.barbieri@intel.com>
Wed, 19 Nov 2014 18:43:02 +0000 (16:43 -0200)
committerGustavo Sverzut Barbieri <gustavo.barbieri@intel.com>
Wed, 19 Nov 2014 18:43:02 +0000 (16:43 -0200)
src/plugins/rm/rm.c

index d3e832d..2e5ffb3 100644 (file)
@@ -325,7 +325,7 @@ _parse_mdpr_header(int fd, struct rm_info *info, bool *has_mdpr)
 
     /* mime type string */
     if (read(fd, &slen, sizeof(slen)) != sizeof(slen)
-        || slen > 32
+        || slen >= 32
         || read(fd, buf, slen) != slen)
         goto done;