diff options
| author | ck <qt-info@nokia.com> | 2010-05-31 12:12:37 +0200 |
|---|---|---|
| committer | ck <qt-info@nokia.com> | 2010-05-31 12:27:55 +0200 |
| commit | 2f43d5c3dfecc31bd4f300f0baefa11a7cc83bc7 (patch) | |
| tree | c152c01bcc4f219e2d99557960015b42d72f11d5 /src/libs/3rdparty | |
| parent | 112df597dbff79b4e3b6f78460eb55ea9501a59d (diff) | |
| download | qt-creator-2f43d5c3dfecc31bd4f300f0baefa11a7cc83bc7.tar.gz | |
SSH: Fix Net7 crash.
Reviewed-by: kh1
Diffstat (limited to 'src/libs/3rdparty')
| -rw-r--r-- | src/libs/3rdparty/net7ssh/src/ne7ssh_sftp.cpp | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/libs/3rdparty/net7ssh/src/ne7ssh_sftp.cpp b/src/libs/3rdparty/net7ssh/src/ne7ssh_sftp.cpp index 0663301200..61d325634e 100644 --- a/src/libs/3rdparty/net7ssh/src/ne7ssh_sftp.cpp +++ b/src/libs/3rdparty/net7ssh/src/ne7ssh_sftp.cpp @@ -108,10 +108,11 @@ bool Ne7sshSftp::handleData (Botan::SecureVector<Botan::byte>& packet) commBuffer.addVector (sftpBuffer); mainBuffer.addVector (sftpBuffer); - len = mainBuffer.getInt(); + if (mainBuffer.length() < sizeof(uint32) + || mainBuffer.getInt() > mainBuffer.length()) + return true; - if (len > mainBuffer.length()) return true; - else commBuffer.clear(); + commBuffer.clear(); _cmd = mainBuffer.getByte(); |