jiigen666/libtorrent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

handle incoming invalid piece messages sizes

Browse Source
This commit is contained in:
Arvid Norberg
2011-04-28 08:55:27 +00:00
parent 58ea6f5b3c
commit 2ab17b7a51
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/bt_peer_connection.cpp
View File

@@ -1155,6 +1155,12 @@ namespace libtorrent
return; return;
} }
if (packet_size() - 13 - list_size > t->block_size())
{
disconnect(errors::packet_too_large, 2);
return;
}
TORRENT_ASSERT(!has_disk_receive_buffer()); TORRENT_ASSERT(!has_disk_receive_buffer());
if (!allocate_disk_receive_buffer(packet_size() - 13 - list_size)) if (!allocate_disk_receive_buffer(packet_size() - 13 - list_size))
{ {
@@ -1168,6 +1174,13 @@ namespace libtorrent
if (recv_pos == 1) if (recv_pos == 1)
{ {
TORRENT_ASSERT(!has_disk_receive_buffer()); TORRENT_ASSERT(!has_disk_receive_buffer());
if (packet_size() - 9 > t->block_size())
{
disconnect(errors::packet_too_large, 2);
return;
}
if (!allocate_disk_receive_buffer(packet_size() - 9)) if (!allocate_disk_receive_buffer(packet_size() - 9))
{ {
m_statistics.received_bytes(0, received); m_statistics.received_bytes(0, received);