diff options
Diffstat (limited to 'source/client')
| -rw-r--r-- | source/client/client.c | 4 | ||||
| -rw-r--r-- | source/client/dnsbrowse.c | 12 |
2 files changed, 15 insertions, 1 deletions
diff --git a/source/client/client.c b/source/client/client.c index 53bd9e6f9aa..a9894418af6 100644 --- a/source/client/client.c +++ b/source/client/client.c @@ -4379,8 +4379,10 @@ static void readline_callback(void) again: - if (cli->fd == -1) + if (cli->fd < 0 || cli->fd >= FD_SETSIZE) { + errno = EBADF; return; + } FD_ZERO(&fds); FD_SET(cli->fd,&fds); diff --git a/source/client/dnsbrowse.c b/source/client/dnsbrowse.c index 5e3a4de9cff..aa2fb22ad65 100644 --- a/source/client/dnsbrowse.c +++ b/source/client/dnsbrowse.c @@ -81,6 +81,11 @@ static void do_smb_resolve(struct mdns_smbsrv_result *browsesrv) TALLOC_FREE(fdset); } + if (mdnsfd < 0 || mdnsfd >= FD_SETSIZE) { + errno = EBADF; + break; + } + fdsetsz = howmany(mdnsfd + 1, NFDBITS) * sizeof(fd_mask); fdset = TALLOC_ZERO(ctx, fdsetsz); FD_SET(mdnsfd, fdset); @@ -183,6 +188,13 @@ int do_smb_browse(void) fdsetsz = howmany(mdnsfd + 1, NFDBITS) * sizeof(fd_mask); fdset = TALLOC_ZERO(ctx, fdsetsz); + + if (mdnsfd < 0 || mdnsfd >= FD_SETSIZE) { + errno = EBADF; + TALLOC_FREE(ctx); + return 1; + } + FD_SET(mdnsfd, fdset); tv.tv_sec = 1; |