diff --git a/channels/chan_skinny.c b/channels/chan_skinny.c index c5f148726a..8291f8b7b6 100644 --- a/channels/chan_skinny.c +++ b/channels/chan_skinny.c @@ -2863,6 +2863,10 @@ static int get_input(struct skinnysession *s) return -1; } dlen = letohl(*(int *)s->inbuf); + if (dlen < 0) { + ast_log(LOG_WARNING, "Skinny Client sent invalid data.\n"); + return -1; + } if (dlen+8 > sizeof(s->inbuf)) { dlen = sizeof(s->inbuf) - 8; }