From e8c5dd44d1383601192faf2a27dc517dffb9ddf9 Mon Sep 17 00:00:00 2001 From: Ian Moffett Date: Sat, 28 Sep 2024 00:16:38 -0400 Subject: lib: net: Fix buffer overflow in recv_frame() Resolved a buffer overflow issue where the byte count returned can be greater than the max length provided in 'len'. Signed-off-by: Ian Moffett --- lib/net/frame.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/net/frame.c b/lib/net/frame.c index d8bba5e..e037d1c 100644 --- a/lib/net/frame.c +++ b/lib/net/frame.c @@ -109,5 +109,5 @@ recv_frame(int client_fd, size_t len, const unsigned char *session_key, void *re return error; } - return ret; + return (ret < len) ? ret : len; } -- cgit v1.2.3