bus-message: avoid wrap-around when using length read from message

Browse Source

We would read (-1), and then add 1 to it, call message_peek_body(..., 0, ...),
and when trying to make use of the data.

The fuzzer test case is just for one site, but they all look similar.

v2: fix two UINT8_MAX/UINT32_MAX mismatches founds by LGTM

...

This commit is contained in:

Zbigniew Jędrzejewski-Szmek

2018-10-02 11:59:08 +02:00

parent d831fb6f2b

commit 902000c198

2 changed files with 24 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

test/fuzz/fuzz-bus-message/crash-603dfd98252375ac7dbced53c2ec312671939a36

BIN

Binary file not shown.