core
/
eccodes
mirror of https://github.com/ecmwf/eccodes.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ECC-1938: BUFR: Dealing with corrupted messages (part 1)

This commit is contained in:
Shahram Najm 2024-11-08 17:15:18 +00:00
parent e213025b62
commit 2b0730694c
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/grib_io.cc
View File

@ -822,6 +822,9 @@ static int read_BUFR(reader* r, int no_alloc)
if (sec3len < 5) { if (sec3len < 5) {
return GRIB_INVALID_MESSAGE; // ECC-1778 return GRIB_INVALID_MESSAGE; // ECC-1778
} }
if (sec3len > 10'000'000) {
return GRIB_INVALID_MESSAGE; // ECC-1938
}
if ((r->read(r->read_data, tmp + i, sec3len - 3, &err) != sec3len - 3) || err) if ((r->read(r->read_data, tmp + i, sec3len - 3, &err) != sec3len - 3) || err)
return err; return err;
i += sec3len - 3; i += sec3len - 3;