Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
Code Issues Releases Wiki Activity

coverity: 62581: lwa auth: handle illegal blob index

Browse source
This commit is contained in:
Andy Green 2020-08-18 10:42:07 +01:00
parent 1892af1ce3
commit fc9a23abeb
1 changed files with 9 additions and 3 deletions

12
lib/secure-streams/system/auth-api.amazon.com/auth.c
View file

@ -74,6 +74,7 @@ auth_api_amazon_com_parser_cb(struct lejp_ctx *ctx, char reason)
{ {
ss_api_amazon_auth_t *m = (ss_api_amazon_auth_t *)ctx->user; ss_api_amazon_auth_t *m = (ss_api_amazon_auth_t *)ctx->user;
struct lws_context *context = (struct lws_context *)m->opaque_data; struct lws_context *context = (struct lws_context *)m->opaque_data;
lws_system_blob_t *blob;
if (!(reason & LEJP_FLAG_CB_IS_VALUE) || !ctx->path_match) if (!(reason & LEJP_FLAG_CB_IS_VALUE) || !ctx->path_match)
return 0; return 0;
@ -82,12 +83,17 @@ auth_api_amazon_com_parser_cb(struct lejp_ctx *ctx, char reason)
case LSSPPT_ACCESS_TOKEN: case LSSPPT_ACCESS_TOKEN:
if (!ctx->npos) if (!ctx->npos)
break; break;
if (lws_system_blob_heap_append(lws_system_get_blob(context,
LWS_SYSBLOB_TYPE_AUTH, blob = lws_system_get_blob(context, LWS_SYSBLOB_TYPE_AUTH,
AUTH_IDX_LWA), AUTH_IDX_LWA);
if (!blob)
return -1;
if (lws_system_blob_heap_append(blob,
(const uint8_t *)ctx->buf, (const uint8_t *)ctx->buf,
ctx->npos)) { ctx->npos)) {
lwsl_err("%s: unable to store auth token\n", __func__); lwsl_err("%s: unable to store auth token\n", __func__);
return -1; return -1;
} }
break; break;