Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
Code Issues Releases Wiki Activity

coverity: 62494: check system blob supposed to be used in h1 at runtime

Browse source
This commit is contained in:
Andy Green 2020-08-18 12:45:21 +01:00
parent 80ea883796
commit 264c98c2c9
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
lib/secure-streams/protocols/ss-h1.c
View file

@ -402,6 +402,7 @@ malformed:
*/
for (m = 0; m < _LWSSS_HBI_COUNT; m++) {
lws_system_blob_t *ab;
int o = 0, n;
if (!h->policy->u.http.blob_header[m])
@ -415,10 +416,12 @@ malformed:
if (o > (int)sizeof(buf) - 2)
return -1;
ab = lws_system_get_blob(wsi->a.context, blob_idx[m], 0);
if (!ab)
return -1;
buflen = sizeof(buf) - o - 2;
n = lws_system_blob_get(
lws_system_get_blob(wsi->a.context, blob_idx[m], 0),
buf + o, &buflen, 0);
n = lws_system_blob_get(ab, buf + o, &buflen, 0);
if (n < 0)
return -1;