narenas
/
opengnsys_ipxe
mirror of https://github.com/ipxe/ipxe.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[slam] Avoid NULL pointer dereference in slam_pull_value() 

Signed-off-by: Michael Brown <mcb30@ipxe.org>
pull/58/merge
Michael Brown 2017-03-21 14:57:36 +02:00
parent 60561d0f3d
commit 64de7dc7fd
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/net/udp/slam.c
View File

@ -400,12 +400,16 @@ static int slam_pull_value ( struct slam_request *slam,
return -EINVAL; return -EINVAL;
} }
/* Read value */ /* Strip value */
iob_pull ( iobuf, len ); iob_pull ( iobuf, len );
*value = ( *data & 0x1f );
while ( --len ) { /* Read value, if applicable */
*value <<= 8; if ( value ) {
*value |= *(++data); *value = ( *data & 0x1f );
while ( --len ) {
*value <<= 8;
*value |= *(++data);
}
} }
return 0; return 0;