--- tftpd/src/srv.c 2014/02/20 01:31:50 1.2.2.3 +++ tftpd/src/srv.c 2014/02/20 14:15:57 1.2.2.4 @@ -63,7 +63,14 @@ txData(sched_task_t *task) n = htons(cli.seq); rpack_uint16(pkt, &n, 0); - len = pread(cli.fd, RPACK_NEXT(pkt), cli.siz, (cli.seq - 1) * cli.siz); + /* max file size check */ + if (cli.tsiz && cli.tsiz <= cli.seq * cli.siz) { + len = MAX(0, cli.tsiz - (cli.seq - 1) * cli.siz); + cli.close = 42; /* last sended packet, should be close! */ + } else + len = cli.siz; + + len = pread(cli.fd, RPACK_NEXT(pkt), len, (cli.seq - 1) * cli.siz); if (len == -1) { ESYSERR(0); code = htole16(3); @@ -367,7 +374,10 @@ DATA(sched_task_t *task) } else cli.seq = ntohs(code); + /* max file size check */ len = TASK_DATLEN(task) - RPACK_OFF(pkt); + if (cli.tsiz && cli.tsiz <= cli.seq * cli.siz) + len = MIN(len, cli.tsiz - (cli.seq - 1) * cli.siz); if (len < cli.siz) cli.close = 42; /* last received packet, should be close! */