CVE-2025-5318: sftpserver: Fix possible buffer overrun

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2025-04-22 21:18:44 +02:00
committed by Andreas Schneider
parent 6fd9cc8ce3
commit 5f4ffda887

View File

@@ -702,7 +702,7 @@ void *sftp_handle(sftp_session sftp, ssh_string handle)
memcpy(&val, ssh_string_data(handle), sizeof(uint32_t));
if (val > SFTP_HANDLES) {
if (val >= SFTP_HANDLES) {
return NULL;
}