mirror of
https://gitlab.freedesktop.org/libfprint/libfprint.git
synced 2026-09-10 21:06:51 +00:00
fpc: Prevent a buffer-overflow on data reading
Reported by: Keith Linneman (LinnemanLabs)
This commit is contained in:
committed by
Marco Trevisan
parent
092c0dfc31
commit
3cc0ae79e7
@@ -173,6 +173,15 @@ fpc_cmd_receive_cb (FpiUsbTransfer *transfer,
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (transfer->actual_length > sizeof (fpc_cmd_response_t))
|
||||||
|
{
|
||||||
|
fp_err ("%s recv evt data length (%ld) exceeds buffer size (%ld)",
|
||||||
|
G_STRFUNC, transfer->actual_length, sizeof (fpc_cmd_response_t));
|
||||||
|
fpi_ssm_mark_failed (transfer->ssm,
|
||||||
|
fpi_device_error_new (FP_DEVICE_ERROR_DATA_INVALID));
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
data->resp_len = transfer->actual_length;
|
data->resp_len = transfer->actual_length;
|
||||||
|
|
||||||
if (data->callback)
|
if (data->callback)
|
||||||
|
|||||||
Reference in New Issue
Block a user