Merge pull request #6 from meme/uaf

Fix UAF in process_recv
corellium · Jun 25, 2021 · 6b0e4c3 · 6b0e4c3
2 parents 56e7909 + a880419
commit 6b0e4c3
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/usbfluxd/client.c b/usbfluxd/client.c
@@ -977,8 +977,9 @@ static void process_recv(struct mux_client *client)
 		if(client->ib_size < hdr->length)
 			return;
 	}
-	client_command(client, hdr);
-	client->ib_size = 0;
+	if (client_command(client, hdr) == 0) {
+		client->ib_size = 0;
+	}
 }
 
 void client_process(int fd, short events)