morgan/FreeRDP
1
0
Fork 0
mirror of https://github.com/morgan9e/FreeRDP synced 2026-04-15 00:44:19 +09:00
Code Issues Packages Projects Releases Wiki Activity

[core,gateway] add checks to tsg_ndr_read_packet_response

Browse Source 
Abort on unexpected offset value.
This commit is contained in:
Armin Novak
2026-01-14 11:13:40 +01:00
parent 4bfda1d308
commit e710af3b4f
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libfreerdp/core/gateway/tsg.c
View File

@@ -773,6 +773,13 @@ static BOOL tsg_ndr_read_packet_response(wLog* log, wStream* s, UINT32* index,
return FALSE;
}
if (MaxOffsetValue != 0)
{
WLog_Print(log, WLOG_ERROR, "Unexpected offset value: %" PRIu32 ", expected: 0",
MaxOffsetValue);
return FALSE;
}
if (!Stream_CheckAndLogRequiredLengthWLog(log, s, MaxSizeValue))
return FALSE;