tree 4f017d6dacf8d3dcaa7120b5a40d5b858c28d474
parent 09e5409cef7cf079d8a5c92e7b6789e48f2d5e81
author Pau Espin Pedrol <pespin@sysmocom.de> 1656518154 +0200
committer laforge <laforge@osmocom.org> 1656685329 +0000

cbsp: avoid potential msgb write overflow in osmo_cbsp_recv_buffered

>>>     CID 273001:  Insecure data handling  (TAINTED_SCALAR)
>>>     Passing tainted expression "needed" to "recv", which uses it as an offset.
1444                    rc = recv(fd, msg->tail, needed, 0);

Fixes: Coverity CID#273001
Change-Id: I17c558254f9c7907b56d61c53c2f597e8e4566cf