From 24cf049395020c360534328a8c6b931a03a5f7dd Mon Sep 17 00:00:00 2001 From: Bastien Nocera Date: Thu, 30 May 2024 16:57:55 +0200 Subject: [PATCH] rctest: Fix possible overrun Error: OVERRUN (CWE-119): [#def57] [important] tools/rctest.c:557:3: overrun-buffer-arg: Calling "send" with "buf" and "len" is suspicious because of the very large index, 18446744073709551615. The index may be due to a negative parameter being interpreted as unsigned. 555| } 556| len = read(fd, buf, data_size); 557|-> send(sk, buf, len, 0); 558| close(fd); 559| return; --- tools/rctest.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tools/rctest.c b/tools/rctest.c index d31180880..ff91eb2f1 100644 --- a/tools/rctest.c +++ b/tools/rctest.c @@ -554,7 +554,8 @@ static void do_send(int sk) exit(1); } len = read(fd, buf, data_size); - send(sk, buf, len, 0); + if (len > 0) + send(sk, buf, len, 0); close(fd); return; } else { -- 2.47.3