shithub: riscv

Info  •  Files  •  Log  •  Branches

python: add buffer length check in sock_recvfrom_into()

--- a/sys/src/cmd/python/Modules/socketmodule.c

+++ b/sys/src/cmd/python/Modules/socketmodule.c

@@ -2547,6 +2547,12 @@

             recvlen = buflen;

 	}

+	if (buflen < recvlen) {

+		PyErr_SetString(PyExc_ValueError,

+				"buffer too small for requested bytes");

+		return NULL;

+	}

+

 	readlen = sock_recvfrom_guts(s, buf, recvlen, flags, &addr);

 	if (readlen < 0) {

 		/* Return an error */