git-market/curl-curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-14 13:01:42 +08:00
Code Issues Actions 15 Packages Projects Releases Wiki Activity

mqtt: reject overly big messages

Browse Source 
Reported-by: Jiyong Yang
Closes #19415
This commit is contained in:
Daniel Stenberg 2025-11-09 11:12:06 +01:00
parent a002c50510
commit 92fd791f31
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/mqtt.c
View File

@ -582,6 +582,8 @@ fail:
return result;
}
#define MAX_MQTT_MESSAGE_SIZE 0xFFFFFFF
static CURLcode mqtt_publish(struct Curl_easy *data)
{
CURLcode result;
@ -611,6 +613,8 @@ static CURLcode mqtt_publish(struct Curl_easy *data)
remaininglength = payloadlen + 2 + topiclen;
encodelen = mqtt_encode_len(encodedbytes, remaininglength);
if(MAX_MQTT_MESSAGE_SIZE - remaininglength - 1 < encodelen)
return CURLE_TOO_LARGE;
/* add the control byte and the encoded remaining length */
pkt = malloc(remaininglength + 1 + encodelen);