fix: harden network security boundaries

2026-08-15 12:34:41 +02:00
parent 41b624db5a
commit ff189aeef2
11 changed files with 149 additions and 16 deletions
@@ -260,6 +260,11 @@ char* receive_str(int file_descriptor) {
    free(data);
    return NULL;
  }
+  if (memchr(data, '\0', size) != NULL) {
+    free(data);
+    log_message(LOG_LEVEL_ERROR, "Received string contains an embedded NUL");
+    return NULL;
+  }
  data[size] = '\0';
  total_allocated_bytes += size + 1;
  log_message(LOG_LEVEL_DEBUG, "Received String: %s", data);