PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

Check length of format option before accessing

Browse Source
This commit is contained in:
dmiller
2025-07-15 18:23:47 +00:00
parent d91d876905
commit c40965039b
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
nse_zlib.cc
View File

@@ -564,7 +564,10 @@ static int lzstream_decompress(lua_State *L) {
success = (l == 0) ? lz_test_eof(L, s) : lz_read_chars(L, s, l);
}
else {
const char *p = lua_tostring(L, n);
size_t l;
const char *p = lua_tolstring(L, n, &l);
if (l < 2)
return luaL_argerror(L, n, "invalid format");
luaL_argcheck(L, p && p[0] == '*', n, "invalid option");
switch (p[1]) {
case 'l': /* line */