webrtc/net/dcsctp/packet/error_cause
Victor Boivie b56a63e470 dcsctp: Prevent overflow of missing parameters
This was found when fuzzing. If the specified number of parameter count
was larger than std::numeric_limits<size_t>::max()/2, the comparison
would overflow and read out-of-bounds. This would only apply to 32-bit
platforms and it would lead to a crash as it would access all of the
virtual memory range, and more.

Fixed: chromium:1216758
Change-Id: I2193d3ed078120b6c3e4645c0b16b9f230055e8d
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/221742
Commit-Queue: Victor Boivie <boivie@webrtc.org>
Reviewed-by: Florent Castelli <orphis@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#34256}
2021-06-09 14:12:53 +00:00
..
cookie_received_while_shutting_down_cause.cc
cookie_received_while_shutting_down_cause.h
cookie_received_while_shutting_down_cause_test.cc
error_cause.cc
error_cause.h
invalid_mandatory_parameter_cause.cc
invalid_mandatory_parameter_cause.h
invalid_mandatory_parameter_cause_test.cc
invalid_stream_identifier_cause.cc
invalid_stream_identifier_cause.h
invalid_stream_identifier_cause_test.cc
missing_mandatory_parameter_cause.cc
missing_mandatory_parameter_cause.h
missing_mandatory_parameter_cause_test.cc
no_user_data_cause.cc
no_user_data_cause.h
no_user_data_cause_test.cc
out_of_resource_error_cause.cc
out_of_resource_error_cause.h
out_of_resource_error_cause_test.cc
protocol_violation_cause.cc
protocol_violation_cause.h
protocol_violation_cause_test.cc
restart_of_an_association_with_new_address_cause.cc
restart_of_an_association_with_new_address_cause.h
restart_of_an_association_with_new_address_cause_test.cc
stale_cookie_error_cause.cc
stale_cookie_error_cause.h
stale_cookie_error_cause_test.cc
unrecognized_chunk_type_cause.cc
unrecognized_chunk_type_cause.h
unrecognized_chunk_type_cause_test.cc
unrecognized_parameter_cause.cc
unrecognized_parameter_cause.h
unrecognized_parameter_cause_test.cc
unresolvable_address_cause.cc
unresolvable_address_cause.h
unresolvable_address_cause_test.cc
user_initiated_abort_cause.cc
user_initiated_abort_cause.h
user_initiated_abort_cause_test.cc