talksik/uWebSockets
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fragments forming a long message are not caught early

Browse Source
This commit is contained in:
Alex Hultman
2019-12-31 12:56:45 +01:00
parent b9062ec770
commit 54dd866a84
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fuzzing/Makefile
+2 -2
View File
@@ -1,8 +1,8 @@
# You can select which sanitizer to use by setting this # You can select which sanitizer to use by setting this
SANITIZER ?= address SANITIZER ?= address
# These are set by OSS-Fuzz, we default to AddressSanitizer # These are set by OSS-Fuzz, we default to AddressSanitizer
CXXFLAGS ?= -DLIBUS_NO_SSL -fsanitize=$(SANITIZER),fuzzer override CXXFLAGS += -DLIBUS_NO_SSL -fsanitize=$(SANITIZER),fuzzer
CFLAGS ?= -DLIBUS_NO_SSL override CFLAGS += -DLIBUS_NO_SSL
OUT ?= . OUT ?= .
oss-fuzz: oss-fuzz:
src/WebSocketContext.h
+5
View File
@@ -100,6 +100,11 @@ private:
if (!webSocketData->fragmentBuffer.length()) { if (!webSocketData->fragmentBuffer.length()) {
webSocketData->fragmentBuffer.reserve(length + remainingBytes); webSocketData->fragmentBuffer.reserve(length + remainingBytes);
} }
/* Fragments forming a big message are not caught until appending them */
if (refusePayloadLength(length + webSocketData->fragmentBuffer.length(), webSocketState, s)) {
forceClose(webSocketState, s);
return true;
}
webSocketData->fragmentBuffer.append(data, length); webSocketData->fragmentBuffer.append(data, length);
/* Are we done now? */ /* Are we done now? */