[FIX] Prevent issue 31/27031/1
authorDmitry Kovalenko <d.kovalenko@samsung.com>
Wed, 3 Sep 2014 11:11:57 +0000 (15:11 +0400)
committerDmitry Kovalenko <d.kovalenko@samsung.com>
Wed, 3 Sep 2014 11:13:29 +0000 (15:13 +0400)
Change-Id: I0b39c2f283a3beb08cbfbb818e301252a40440ca
Signed-off-by: Dmitry Kovalenko <d.kovalenko@samsung.com>
daemon/daemon.c

index e264f74..d232a68 100644 (file)
@@ -792,6 +792,8 @@ static int controlSocketHandler(int efd)
        if (recv_len == -1 || recv_len == 0)
                return -11;
        else {
+               if (msg_head.len > RECV_BUF_MAX)
+                       return -1;
                msg = malloc(MSG_CMD_HDR_LEN + msg_head.len);
                if (!msg) {
                        LOGE("Cannot alloc msg\n");