From cc9a8a7dfe47b0d33b6a03d1c8473cd15190ff17 Mon Sep 17 00:00:00 2001 From: "Carsten Haitzler (Rasterman)" Date: Fri, 29 Sep 2017 12:07:48 +0900 Subject: [PATCH] evas cserve - fix validation of cserve mesg size field fix coverity CID 1039567 --- src/bin/evas/evas_cserve2_slaves.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/bin/evas/evas_cserve2_slaves.c b/src/bin/evas/evas_cserve2_slaves.c index f790357..72fc143 100644 --- a/src/bin/evas/evas_cserve2_slaves.c +++ b/src/bin/evas/evas_cserve2_slaves.c @@ -222,6 +222,11 @@ _slave_proc_read_cb(int fd, Fd_Flags flags, void *data) { return; } + if ((ints[0] < 0) || (ints[0] > (128 * 1024))) + { + ERR("Invalid size to read: %i", ints[0]); + return; + } s->read.size = ints[0]; s->read.cmd = ints[1]; if (s->read.size) -- 2.7.4