From 39169ace09f702b8ae66fe373424e5c0b1326a6d Mon Sep 17 00:00:00 2001
From: moneromooo-monero <moneromooo-monero@users.noreply.github.com>
Date: Fri, 8 Mar 2019 12:02:21 +0000
Subject: epee: basic sanity check on allocation size from untrusted source

Reported by guidov
---
 contrib/epee/include/storages/portable_storage_from_bin.h | 1 +
 1 file changed, 1 insertion(+)

diff --git a/contrib/epee/include/storages/portable_storage_from_bin.h b/contrib/epee/include/storages/portable_storage_from_bin.h
index 2884f8c5e..e0a32b3ca 100644
--- a/contrib/epee/include/storages/portable_storage_from_bin.h
+++ b/contrib/epee/include/storages/portable_storage_from_bin.h
@@ -136,6 +136,7 @@ namespace epee
       //for pod types
       array_entry_t<type_name> sa;
       size_t size = read_varint();
+      CHECK_AND_ASSERT_THROW_MES(size <= m_count, "Size sanity check failed");
       sa.reserve(size);
       //TODO: add some optimization here later
       while(size--)
-- 
cgit v1.2.3