Merge pull request #177 from junliangtan/master
fixed the crash issue when len is minus caused by invalid data.
This commit is contained in:
commit
2df2110e6a
2
ikcp.c
2
ikcp.c
@ -772,7 +772,7 @@ int ikcp_input(ikcpcb *kcp, const char *data, long size)
|
|||||||
|
|
||||||
size -= IKCP_OVERHEAD;
|
size -= IKCP_OVERHEAD;
|
||||||
|
|
||||||
if ((long)size < (long)len) return -2;
|
if ((long)size < (long)len || (int)len < 0) return -2;
|
||||||
|
|
||||||
if (cmd != IKCP_CMD_PUSH && cmd != IKCP_CMD_ACK &&
|
if (cmd != IKCP_CMD_PUSH && cmd != IKCP_CMD_ACK &&
|
||||||
cmd != IKCP_CMD_WASK && cmd != IKCP_CMD_WINS)
|
cmd != IKCP_CMD_WASK && cmd != IKCP_CMD_WINS)
|
||||||
|
Loading…
x
Reference in New Issue
Block a user