Do not forget about security

10 years ago · e2968a43de
parent e3ce360ec9
commit e2968a43de
1 changed files with 2 additions and 0 deletions
--- a/src-x86-x64-Fusix/IniFile.cpp
+++ b/src-x86-x64-Fusix/IniFile.cpp
@ -370,6 +370,8 @@ bool INI_FILE::GetVariableInSection(char *SectionName, char *VariableName, INI_V

 	DWORD ValueLen = strlen(Variable.VariableValue);
 	if((ValueLen % 2) != 0) return false;
+	// for security reasons not more than 16 bytes
+	if (ValueLen > 32) ValueLen = 32;  // 32 hex digits

 	memset(RetVariable, 0x00, sizeof(*RetVariable));
 	memcpy(RetVariable->Name, Variable.VariableName, ValueLen);