From c3c68490a2e4e83347f853214608168d793085e5 Mon Sep 17 00:00:00 2001
From: rswindell <>
Date: Mon, 18 Aug 2003 18:51:48 +0000
Subject: [PATCH] show_msg() ignores data fields with invalid lengths.
---
src/sbbs3/getmsg.cpp | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/src/sbbs3/getmsg.cpp b/src/sbbs3/getmsg.cpp
index 090b26d2a5..ef996f83e8 100644
--- a/src/sbbs3/getmsg.cpp
+++ b/src/sbbs3/getmsg.cpp
@@ -226,6 +226,8 @@ void sbbs_t::show_msg(smbmsg_t* msg, long mode)
switch(msg->dfield[i].type) {
case TEXT_BODY:
case TEXT_TAIL:
+ if(msg->dfield[i].length < sizeof(xlat)) /* Invalid length */
+ continue;
fseek(smb.sdt_fp,msg->hdr.offset+msg->dfield[i].offset
,SEEK_SET);
fread(&xlat,sizeof(xlat),1,smb.sdt_fp);
@@ -262,7 +264,8 @@ void sbbs_t::show_msg(smbmsg_t* msg, long mode)
else
putmsg_fp(smb.sdt_fp,msg->dfield[i].length-sizeof(xlat),mode);
CRLF;
- break; }
+ break;
+ }
}
#endif
--
GitLab