Prevent buffer overflow of signal agent

Change-Id: Ic55d8f5471e2963c7cf6fcc1d09dd166a5accae6
Signed-off-by: Sangyoon Jang <jeremy.jang@samsung.com>

diff --git a/installer/pkgmgr_installer_signal_agent.c b/installer/pkgmgr_installer_signal_agent.c
index 9d5ebd9c9ea0c8664c4b7cb2856b6f26830e21a9..2e1b46c7f0f737cde78e6070421e216a108c48d9 100644 (file)
--- a/installer/pkgmgr_installer_signal_agent.c
+++ b/installer/pkgmgr_installer_signal_agent.c
@@ -225,6 +225,12 @@ static gboolean __handle_signal(gint fd, GIOCondition cond, gpointer user_data)
        memcpy(&type_len, buf, sizeof(size_t));
        memcpy(&data_len, buf + sizeof(size_t), sizeof(gsize));
 
+       if ((type_len + data_len) > BUFMAX) {
+               LOGE("received size is too large: %zu %zd", type_len, data_len);
+               close(clifd);
+               return FALSE;
+       }
+
        r = recv(clifd, buf, type_len + data_len, 0);
        if (r < 0) {
                LOGE("recv failed: %d", errno);