Merge pull request #81 from sysown/v2.x_handle_malformed_packet

Fixed handling of malformed packet
sysown · Sep 20, 2024 · b7fa795 · b7fa795
2 parents d4bd936 + e3c13fb
commit b7fa795
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/lib/MySQL_Session.cpp b/lib/MySQL_Session.cpp
@@ -3953,6 +3953,14 @@ int MySQL_Session::get_pkts_from_client(bool& wrong_pass, PtrSize_t& pkt) {
 		if (mirror==false) {
 			client_myds->PSarrayIN->remove_index(0,&pkt);
 		}
+
+		if (pkt.size <= sizeof(mysql_hdr)) {
+			proxy_debug(PROXY_DEBUG_MYSQL_COM, 5, "Malformed packet received\n");
+			l_free(pkt.size, pkt.ptr);
+			handler_ret = -1;
+			return handler_ret;
+		}
+
 		switch (status) {
 			case WAITING_CLIENT_DATA:
 				if (pkt.size==(0xFFFFFF+sizeof(mysql_hdr))) { // we are handling a multi-packet