Changeset 220 for common/trunk/src/mbus.c

Timestamp:

08/26/99 17:42:07 (14 years ago)

Author:

ucaccsp

Message:

Added loop count to mbus_recv() to avoid denial of service attack.

Files:

• common/trunk/src/mbus.c (modified) (3 diffs)

common/trunk/src/mbus.c

@@ -728 +728 @@
         char            *auth, *ver, *src, *dst, *ack, *r, *cmd, *param, *npos;
         char            buffer[MBUS_BUF_SIZE];
-        int             buffer_len, seq, i, a, rx, ts, authlen;
+        int             buffer_len, seq, i, a, rx, ts, authlen, loop_count;
         char            ackbuf[MBUS_ACK_BUF_SIZE];
         char            digest[16];
@@ -734 +734 @@
 
         rx = FALSE;
-        while (1) {
+        loop_count = 0;
+        while (loop_count++ < 10) {
                 memset(buffer, 0, MBUS_BUF_SIZE);
                 assert(m->s != NULL);
@@ -883 +884 @@
                 mbus_parse_done(m);
         }
-}
-
+        return rx;
+}
+