Fix for trans_force_read_s Bounds Check Uses Wrong Pointer
This commit is contained in:
+2
-1
@@ -471,7 +471,8 @@ trans_force_read_s(struct trans *self, struct stream *in_s, int size)
|
|||||||
int rcvd;
|
int rcvd;
|
||||||
|
|
||||||
if (self->status != TRANS_STATUS_UP ||
|
if (self->status != TRANS_STATUS_UP ||
|
||||||
size < 0 || !s_check_rem_out(in_s, size))
|
size < 0 ||
|
||||||
|
in_s->end + size > in_s->data + in_s->size)
|
||||||
{
|
{
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user