range check for configuration attribute types

diff --git a/src/libhydra/plugins/attr_sql/pool_attributes.c b/src/libhydra/plugins/attr_sql/pool_attributes.c
index 52314aa89d17bfdad91429d97d3f6d37cac98668..7ee20753636b322a2abc8f938b29eeb1c97f01a9 100644 (file)
--- a/src/libhydra/plugins/attr_sql/pool_attributes.c
+++ b/src/libhydra/plugins/attr_sql/pool_attributes.c
@@ -232,6 +232,12 @@ static bool parse_attributes(char *name, char *value, value_type_t *value_type,
                free(blob->ptr);
                return FALSE;
        }
+       if (*type < 1 || *type > 32767)
+       {
+               fprintf(stderr, "the attribute type must lie in the range 1..32767.\n");
+               free(blob->ptr);
+               return FALSE);
+       }
        if (*value_type == VALUE_NONE)
        {
                *value_type = VALUE_HEX;