Fix for trans_force_read_s Bounds Check Uses Wrong Pointer
This commit is contained in:
+2
-1
@@ -471,7 +471,8 @@ trans_force_read_s(struct trans *self, struct stream *in_s, int size)
|
||||
int rcvd;
|
||||
|
||||
if (self->status != TRANS_STATUS_UP ||
|
||||
size < 0 || !s_check_rem_out(in_s, size))
|
||||
size < 0 ||
|
||||
in_s->end + size > in_s->data + in_s->size)
|
||||
{
|
||||
return 1;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user