Fix checking the length of remaining data in stream for very compact orders.
This commit is contained in:
parent
1353fd75dd
commit
6249a5fec3
2
orders.c
2
orders.c
@ -1265,7 +1265,7 @@ process_secondary_order(STREAM s)
|
||||
in_uint16_le(s, flags); /* used by bmpcache2 */
|
||||
in_uint8(s, type);
|
||||
|
||||
if (!s_check_rem(s, length + 7))
|
||||
if (!s_check_rem(s, (sint16) length + 7))
|
||||
{
|
||||
rdp_protocol_error("process_secondary_order(), next order pointer would overrun stream", &packet);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user