Add integer overflow protection

cesanta · Aug 18, 2023 · f3617a1 · f3617a1
1 parent 69d2ba7
commit f3617a1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/mongoose.c b/mongoose.c
@@ -1533,6 +1533,7 @@ int mg_http_parse(const char *s, size_t len, struct mg_http_message *hm) {
     hm->body.len = 0;
     hm->message.len = (size_t) req_len;
   }
+  if (hm->message.len < (size_t) req_len) return -1; // Overflow protection
 
   return req_len;
 }

diff --git a/src/http.c b/src/http.c
@@ -301,6 +301,7 @@ int mg_http_parse(const char *s, size_t len, struct mg_http_message *hm) {
     hm->body.len = 0;
     hm->message.len = (size_t) req_len;
   }
+  if (hm->message.len < (size_t) req_len) return -1;  // Overflow protection
 
   return req_len;
 }