|
|
| version 1.30.2.12, 2024/03/20 17:06:11 | version 1.32, 2024/10/29 01:33:17 |
|---|---|
| Line 543 rxUDPPacket(sched_task_t *task) | Line 543 rxUDPPacket(sched_task_t *task) |
| #endif | #endif |
| rlen = recvfrom(TASK_FD(task), AIT_GET_BUF(&b), AIT_LEN(&b), 0, &sa.sa, &salen); | rlen = recvfrom(TASK_FD(task), AIT_GET_BUF(&b), AIT_LEN(&b), 0, &sa.sa, &salen); |
| rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); | rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); |
| if (rlen < sizeof(struct tagRPCCall)) | if (!rpc || rlen < sizeof(struct tagRPCCall)) |
| goto end; | goto end; |
| else | else |
| len = ntohl(rpc->call_len); | len = ntohl(rpc->call_len); |
| Line 687 rxRAWPacket(sched_task_t *task) | Line 687 rxRAWPacket(sched_task_t *task) |
| if (sa.sa.sa_family == AF_INET) { | if (sa.sa.sa_family == AF_INET) { |
| struct ip *h; | struct ip *h; |
| h = (struct ip*) AIT_GET_BUF(&b); | h = (struct ip*) AIT_GET_BUF(&b); |
| if (rlen < ntohs(h->ip_len) || h->ip_p != IPPROTO_ERPC) | if (!h || rlen < ntohs(h->ip_len) || h->ip_p != IPPROTO_ERPC) |
| goto end; | goto end; |
| else { | else { |
| rlen -= sizeof(struct ip); | rlen -= sizeof(struct ip); |
| Line 697 rxRAWPacket(sched_task_t *task) | Line 697 rxRAWPacket(sched_task_t *task) |
| #ifdef IPV6_REMOVE_HEADER | #ifdef IPV6_REMOVE_HEADER |
| struct ip6_hdr *h; | struct ip6_hdr *h; |
| h = (struct ip6_hdr*) AIT_GET_BUF(&b); | h = (struct ip6_hdr*) AIT_GET_BUF(&b); |
| if (rlen < ntohs(h->ip6_plen) || h->ip6_nxt != IPPROTO_ERPC) | if (!h || rlen < ntohs(h->ip6_plen) || h->ip6_nxt != IPPROTO_ERPC) |
| goto end; | goto end; |
| else { | else { |
| rlen -= sizeof(struct ip6_hdr); | rlen -= sizeof(struct ip6_hdr); |
| Line 707 rxRAWPacket(sched_task_t *task) | Line 707 rxRAWPacket(sched_task_t *task) |
| rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); | rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); |
| #endif | #endif |
| } | } |
| if (rlen < sizeof(struct tagRPCCall)) | if (!rpc || rlen < sizeof(struct tagRPCCall)) |
| goto end; | goto end; |
| else | else |
| len = ntohl(rpc->call_len); | len = ntohl(rpc->call_len); |
| Line 1014 rxEXTPacket(sched_task_t *task) | Line 1014 rxEXTPacket(sched_task_t *task) |
| AIT_SET_BUF(&b, NULL, srv->srv_netbuf); | AIT_SET_BUF(&b, NULL, srv->srv_netbuf); |
| rlen = read(TASK_FD(task), AIT_GET_BUF(&b), AIT_LEN(&b)); | rlen = read(TASK_FD(task), AIT_GET_BUF(&b), AIT_LEN(&b)); |
| rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); | rpc = (struct tagRPCCall*) AIT_GET_BUF(&b); |
| if (rlen < sizeof(struct tagRPCCall)) | if (!rpc || rlen < sizeof(struct tagRPCCall)) |
| goto end; | goto end; |
| else | else |
| len = ntohl(rpc->call_len); | len = ntohl(rpc->call_len); |