nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-13 06:33:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

Check for trailing input garbage in tor_compress_impl() when decompressing

Browse Source 
Fixes #22629.
This commit is contained in:
teor 2017-06-16 09:41:29 +10:00
parent 8e1b37a4aa
commit 952c9073ad
No known key found for this signature in database
GPG Key ID: 740D9E39025272A2
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/common/compress.c
View File

@ -138,9 +138,17 @@ tor_compress_impl(int compress,
case TOR_COMPRESS_OK:
if (compress || complete_only) {
goto err;
} else {
if (in_len != 0) {
log_fn(protocol_warn_level, LD_PROTOCOL,
"Unexpected extra input while decompressing");
log_debug(LD_GENERAL, "method: %d level: %d at len: %zd",
method, compression_level, in_len);
goto err;
} else {
goto done;
}
}
break;
case TOR_COMPRESS_BUFFER_FULL: {
if (!compress && outptr < *out+out_alloc) {