[WIP] One more length check.

2020-04-05 16:39:33 -04:00 · 2020-04-05 16:39:33 -04:00 · 2cec76f748
commit 2cec76f748
parent 792e23d481
1 changed files with 4 additions and 1 deletions
--- a/src/protocols/rdp/channels/rdpsnd/rdpsnd.c
+++ b/src/protocols/rdp/channels/rdpsnd/rdpsnd.c
@ -43,7 +43,10 @@ void guac_rdpsnd_process_receive(guac_rdp_common_svc* svc,
    Stream_Read_UINT8(input_stream, header.message_type);
    Stream_Seek_UINT8(input_stream);
    Stream_Read_UINT16(input_stream, header.body_size);
-
+    
+    if (Stream_GetRemainingLength(input_stream) < header.body_size)
+        return;
+    
    /* 
     * If next PDU is SNDWAVE (due to receiving WaveInfo PDU previously),
     * ignore the header and parse as a Wave PDU.