Add an assortment of extra safety checks.

[sgt/putty] / sshrsa.c

diff --git a/sshrsa.c b/sshrsa.c
index 77a6bb2..163a92b 100644 (file)
--- a/sshrsa.c
+++ b/sshrsa.c
@@ -526,6 +526,8 @@ static void getstring(char **data, int *datalen, char **p, int *length)
     if (*datalen < 4)
        return;
     *length = GET_32BIT(*data);
+    if (*length < 0)
+        return;
     *datalen -= 4;
     *data += 4;
     if (*datalen < *length)