From 1fce457b93851215bba102aba1a9675d103af9c5 Mon Sep 17 00:00:00 2001 From: "saurabh.s9" Date: Wed, 8 Feb 2017 12:01:47 +0530 Subject: [PATCH] [IOT-1701] Added check for int overflow Change-Id: I5b613534ab19344a5d261f0773df52c4d9bb2176 Signed-off-by: saurabh.s9 Reviewed-on: https://gerrit.iotivity.org/gerrit/17111 Tested-by: jenkins-iotivity Reviewed-by: Pawel Winogrodzki Reviewed-by: Phil Coval Reviewed-by: Randeep Singh --- resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c b/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c index 594135d..d8a7a89 100644 --- a/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c +++ b/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c @@ -600,6 +600,11 @@ static int RecvCallBack(void * tep, unsigned char * data, size_t dataLen) size_t retLen = (recBuf->len > recBuf->loaded ? recBuf->len - recBuf->loaded : 0); retLen = (retLen < dataLen ? retLen : dataLen); + if (retLen > INT_MAX) + { + return 0; + } + memcpy(data, recBuf->buff + recBuf->loaded, retLen); recBuf->loaded += retLen; -- 2.7.4