diff options
| author | van Hauser <vh@thc.org> | 2020-12-09 08:58:07 +0100 |
|---|---|---|
| committer | van Hauser <vh@thc.org> | 2020-12-09 08:58:07 +0100 |
| commit | cebbedd238501d7f4326b0494cd60208a92e1645 (patch) | |
| tree | 687f2231f262c46ff560078fc11f890c4fe32076 | |
| parent | a7125c68eb49d35de8aee6926cc0e9a9d839265f (diff) | |
| download | afl++-cebbedd238501d7f4326b0494cd60208a92e1645.tar.gz | |
fix cmin/tmin potential overflow on too large files
| -rw-r--r-- | src/afl-forkserver.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/afl-forkserver.c b/src/afl-forkserver.c index 5a8e56b2..3afb94be 100644 --- a/src/afl-forkserver.c +++ b/src/afl-forkserver.c @@ -960,6 +960,8 @@ void afl_fsrv_write_to_testcase(afl_forkserver_t *fsrv, u8 *buf, size_t len) { if (fsrv->shmem_fuzz) { + if (unlikely(len > MAX_FILE)) len = MAX_FILE; + *fsrv->shmem_fuzz_len = len; memcpy(fsrv->shmem_fuzz, buf, len); #ifdef _DEBUG |