Changeset 11124 in ntrip for trunk/BNC/src/upload/bncrtnetuploadcaster.cpp

Timestamp:

Oct 24, 2026, 10:10:29 PM (6 days ago)

Author:

stuerze

Message:

Some fixes regarding memory corruption from stream data, credential exposure,

File:

• trunk/BNC/src/upload/bncrtnetuploadcaster.cpp (modified) (1 diff)

trunk/BNC/src/upload/bncrtnetuploadcaster.cpp

@@ -504 +504 @@
             in >> ui >> vtec.NumLayers;
             vtec.UpdateInterval = (unsigned int)determineUpdateInd(ui);
+            if (vtec.NumLayers > VTEC_NUMIONOLAYERS) {
+                vtec.NumLayers = 0;
+            }
             for (unsigned ll = 0; ll < vtec.NumLayers; ll++) {
                 int dummy;
                 in >> dummy >> vtec.Layers[ll].Degree >> vtec.Layers[ll].Order
                     >> vtec.Layers[ll].Height;
+                if (vtec.Layers[ll].Degree < 1 || vtec.Layers[ll].Degree > VTEC_MAXIONODEGREE ||
+                    vtec.Layers[ll].Order  < 1 || vtec.Layers[ll].Order  > VTEC_MAXIONOORDER) {
+                    vtec.NumLayers = 0;
+                    break;
+                }
                 for (unsigned iDeg = 0; iDeg <= vtec.Layers[ll].Degree; iDeg++) {
                     for (unsigned iOrd = 0; iOrd <= vtec.Layers[ll].Order; iOrd++) {