Tighten up a lot of casts from unsigned to int which are read by one
[sgt/putty] / sshrsa.c
index 77a6bb2..6403343 100644 (file)
--- a/sshrsa.c
+++ b/sshrsa.c
@@ -525,7 +525,9 @@ static void getstring(char **data, int *datalen, char **p, int *length)
     *p = NULL;
     if (*datalen < 4)
        return;
-    *length = GET_32BIT(*data);
+    *length = toint(GET_32BIT(*data));
+    if (*length < 0)
+        return;
     *datalen -= 4;
     *data += 4;
     if (*datalen < *length)