Changeset 11236 for trunk/libtransmission/rpcimpl.c

Timestamp:

Sep 19, 2010, 8:36:31 PM (12 years ago)

Author:

Longinus00

Message:

(trunk) bounds check trackerIds passed over rpc

File:

• trunk/libtransmission/rpcimpl.c (modified) (2 diffs)

trunk/libtransmission/rpcimpl.c

@@ -873 +873 @@
             && tr_bencGetStr( pair[1], &newval )
             && tr_urlIsValid( newval, -1 )
-            && pos < n )
+            && pos < n
+            && pos >= 0 )
         {
             tr_free( trackers[pos].announce );
@@ -917 +918 @@
     {
         int64_t pos;
-        if( tr_bencGetInt( val, &pos ) && pos < n )
+
+        if(    tr_bencGetInt( val, &pos )
+            && pos < n
+            && pos >= 0 )
             tids[t++] = pos;
     }