Changeset 850

Timestamp:

Oct 8, 2008, 2:45:12 PM (16 years ago)

Author:

andersk

Message:

Check message length.

File:

• server/common/oursrc/execsys/gitproxy.pl (modified) (1 diff)

server/common/oursrc/execsys/gitproxy.pl

@@ -34 +34 @@
     $msg .= $buf;
     my $len;
-    if (($len) = $msg =~ m/^([[:xdigit:]]{4})/) {
+    if (($len) = $msg =~ m/^([[:xdigit:]]{4})/ and length($') >= hex($len)) {
         foreach (split("\0", $')) {
             last if ($host) = m/^host=(.*)$/;