[gnunet] branch master updated: -proper ResultMessage validation with new flags

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository gnunet.

The following commit(s) were added to refs/heads/master by this push:
     new 829c3366c -proper ResultMessage validation with new flags
829c3366c is described below

commit 829c3366c71b52664b9469b6329f6c51a2394922
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Wed Aug 24 21:59:41 2022 +0200

    -proper ResultMessage validation with new flags
---
 src/dht/gnunet-service-dht_neighbours.c | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/src/dht/gnunet-service-dht_neighbours.c 
b/src/dht/gnunet-service-dht_neighbours.c
index 025f22c86..3344824b3 100644
--- a/src/dht/gnunet-service-dht_neighbours.c
+++ b/src/dht/gnunet-service-dht_neighbours.c
@@ -2509,14 +2509,21 @@ static enum GNUNET_GenericReturnValue
 check_dht_p2p_result (void *cls,
                       const struct PeerResultMessage *prm)
 {
+  uint16_t msize = ntohs (prm->header.size) - sizeof (*prm);
+  enum GNUNET_DHT_RouteOption ro
+    = (enum GNUNET_DHT_RouteOption) ntohs (prm->options);
+  bool truncated = (0 != (ro & GNUNET_DHT_RO_TRUNCATED));
+  bool tracked = (0 != (ro & GNUNET_DHT_RO_RECORD_ROUTE));
+
   uint16_t get_path_length = ntohs (prm->get_path_length);
   uint16_t put_path_length = ntohs (prm->put_path_length);
-  uint16_t msize = ntohs (prm->header.size);
+  size_t vsize = (truncated ? sizeof (struct GNUNET_PeerIdentity) : 0)
+                 + (tracked ? sizeof (struct GNUNET_CRYPTO_EddsaSignature) : 
0);
 
   (void) cls;
-  if ( (msize <
-        sizeof(struct PeerResultMessage)
-        + (get_path_length + put_path_length)
+  if ( (msize < vsize) ||
+       (msize - vsize <
+        (get_path_length + put_path_length)
         * sizeof(struct GNUNET_DHT_PathElement)) ||
        (get_path_length >
         GNUNET_MAX_MESSAGE_SIZE / sizeof(struct GNUNET_DHT_PathElement)) ||

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.