kopia lustrzana https://gitlab.com/sane-project/backends
Merge branch 'issue07-out-of-bounds-read-in-esci2_check_header' into '279-confidential-issue'
epsonds: Read only up to seven hexdigits to determine payload size See merge request paddy-hack/backends!6merge-requests/463/merge
commit
226d9c9289
|
@ -117,7 +117,7 @@ esci2_check_header(const char *cmd, const char *buf, unsigned int *more)
|
|||
return 0;
|
||||
}
|
||||
|
||||
err = sscanf(&buf[5], "%x#", more);
|
||||
err = sscanf(&buf[5], "%7x#", more);
|
||||
if (err != 1) {
|
||||
DBG(1, "cannot decode length from header\n");
|
||||
return 0;
|
||||
|
|
Ładowanie…
Reference in New Issue