Detect/reject negative offset argument values to smb_freemsgdat()

c2d6c7c2 · Rob Swindell · b47b97c2 · c2d6c7c2
Commit c2d6c7c2 authored Mar 02, 2022 by Rob Swindell 💬
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

src/smblib/smballoc.c src/smblib/smballoc.c +3 -0

No files found.
--- a/src/smblib/smballoc.c
+++ b/src/smblib/smballoc.c
@@ -129,6 +129,9 @@ int smb_freemsgdat(smb_t* smb, off_t offset, ulong length, uint16_t refs)
 	off_t	sda_offset;
 	off_t	flen;

+	if(offset < 0)
+		return SMB_ERR_DAT_OFFSET;
+
 	if(smb->status.attr&SMB_HYPERALLOC)	/* do nothing */
 		return(SMB_SUCCESS);