From f410a5c637802a9d931beb00929250c8d403e5cc Mon Sep 17 00:00:00 2001 From: Alan Jowett Date: Fri, 14 Feb 2020 08:58:40 -0700 Subject: [PATCH] ocserv-main should limit the maximum message size a client can send Resolves: #244 Signed-off-by: Alan Jowett --- src/main-worker-cmd.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/main-worker-cmd.c b/src/main-worker-cmd.c index 5e3239e9..f250192f 100644 --- a/src/main-worker-cmd.c +++ b/src/main-worker-cmd.c @@ -256,6 +256,13 @@ int handle_worker_commands(main_server_st * s, struct proc_st *proc) length = ret; + if (length > MAX_MSG_SIZE) { + mslog(s, proc, LOG_DEBUG, + "received too big message (%d)", (int)length); + ret = ERR_BAD_COMMAND; + return ret; + } + mslog(s, proc, LOG_DEBUG, "main received worker's message '%s' of %u bytes\n", cmd_request_to_str(cmd), (unsigned)length);