Merge commit from fork
CVE-2026-33689: Fix length check on channel open
This commit is contained in:
+1
-1
@@ -2226,7 +2226,7 @@ xrdp_mm_trans_process_drdynvc_channel_open(struct xrdp_mm *self,
|
||||
char name[1024 + 1];
|
||||
struct xrdp_drdynvc_procs procs;
|
||||
|
||||
if (!s_check_rem(s, 2))
|
||||
if (!s_check_rem(s, 4))
|
||||
{
|
||||
return 1;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user