From f6fc2b9dd2dec8376ad53df57a544fa66f37a2ca Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Tue, 12 Oct 2004 18:38:36 +0000 Subject: [PATCH] Add fix for remote-crash bug. svn:r2447 --- src/or/buffers.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/or/buffers.c b/src/or/buffers.c index 7d5153ad5e..89dc0fc6b0 100644 --- a/src/or/buffers.c +++ b/src/or/buffers.c @@ -381,6 +381,10 @@ int fetch_from_buf_http(buf_t *buf, p = strstr(headers, CONTENT_LENGTH); if (p) { contentlen = atoi(p+strlen(CONTENT_LENGTH)); + if (contentlen < 0) { + log_fn(LOG_WARN, "Content-Length is less than zero; it looks like someone is trying to crash us."); + return -1; + } /* if content-length is malformed, then our body length is 0. fine. */ log_fn(LOG_DEBUG,"Got a contentlen of %d.",contentlen); if(bodylen < contentlen) { -- 2.47.3