mms: fixed buffer overflow bug

skeller · May 11, 2014 · d95b3f2 · d95b3f2
1 parent 7acc533
commit d95b3f2
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/plugins/mms/libmms/mms.c b/plugins/mms/libmms/mms.c
@@ -275,7 +275,11 @@ static int fallback_io_tcp_connect(void *data, const char *host, int port, int *
   for (rp = res; rp != NULL; rp = rp->ai_next) {
     struct sockaddr_in sin;
     memset (&sin, 0, sizeof (sin));
-    memcpy (&sin, rp->ai_addr, rp->ai_addrlen);
+    int l = rp->ai_addrlen;
+    if (l > sizeof (sin)) {
+        l = sizeof (sin);
+    }
+    memcpy (&sin, rp->ai_addr, l);
 #endif
 
     time_t t = time (NULL);