From 9413e433ea83095735ddb8dd080bceecde8a9b57 Mon Sep 17 00:00:00 2001
From: Volker Lendecke <vl@samba.org>
Date: Sat, 29 Dec 2018 20:20:13 +0100
Subject: swrap: Add an overflow check

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---
 src/socket_wrapper.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src')

diff --git a/src/socket_wrapper.c b/src/socket_wrapper.c
index df70df5..a0e1df0 100644
--- a/src/socket_wrapper.c
+++ b/src/socket_wrapper.c
@@ -4752,6 +4752,11 @@ static ssize_t swrap_sendmsg_before(int fd,
 		for (i = 0; i < (size_t)msg->msg_iovlen; i++) {
 			size_t nlen;
 			nlen = len + msg->msg_iov[i].iov_len;
+			if (nlen < len) {
+				/* overflow */
+				errno = EMSGSIZE;
+				goto out;
+			}
 			if (nlen > mtu) {
 				break;
 			}
-- 
cgit