From 6fff8a4cfd822c1ac5e3992ea965bddc97648970 Mon Sep 17 00:00:00 2001
From: kpfleming <kpfleming@f38db490-d61c-443f-a65b-d21fe96a405b>
Date: Tue, 17 Oct 2006 17:57:36 +0000
Subject: properly handle signed integer input

git-svn-id: http://svn.digium.com/svn/asterisk/branches/1.0@45336 f38db490-d61c-443f-a65b-d21fe96a405b
---
 channels/chan_skinny.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/channels/chan_skinny.c b/channels/chan_skinny.c
index 98d9d86d8..9de3faea6 100644
--- a/channels/chan_skinny.c
+++ b/channels/chan_skinny.c
@@ -2305,6 +2305,10 @@ static int get_input(struct skinnysession *s)
 			return -1;
 		}
 		dlen = *(int *)s->inbuf;
+		if (dlen < 0) {
+			ast_log(LOG_WARNING, "Skinny Client sent invalid data.\n");
+			return -1;
+		}
 		if (dlen+8 > sizeof(s->inbuf))
 			dlen = sizeof(s->inbuf) - 8;
 		res = read(s->fd, s->inbuf+4, dlen+4);
-- 
cgit v1.2.1