From 466f939ce9f5667dd7d70a72bed9769ed0b4d588 Mon Sep 17 00:00:00 2001 From: Steven Barth Date: Thu, 31 Jan 2013 08:38:38 +0100 Subject: [PATCH] Prevent OOM DOS --- src/odhcp6c.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/odhcp6c.c b/src/odhcp6c.c index 6a1d1b4..b5665ee 100644 --- a/src/odhcp6c.c +++ b/src/odhcp6c.c @@ -317,6 +317,8 @@ static uint8_t* odhcp6c_resize_state(enum odhcp6c_state state, ssize_t len) { if (len == 0) return state_data[state] + state_len[state]; + else if (state_len[state] + len > 1024) + return NULL; uint8_t *n = realloc(state_data[state], state_len[state] + len); if (n || state_len[state] + len == 0) { -- 2.39.5