diff -Nru libgtop-1.0.13.orig/src/daemon/gnuserv.c libgtop-1.0.13/src/daemon/gnuserv.c --- libgtop-1.0.13.orig/src/daemon/gnuserv.c Mon Nov 26 20:37:59 2001 +++ libgtop-1.0.13/src/daemon/gnuserv.c Tue Nov 27 09:16:16 2001 @@ -200,6 +200,13 @@ auth_data_len = atoi (buf); + if (auth_data_len < 1 || auth_data_len > sizeof(buf)) { + syslog_message(LOG_WARNING, + "Invalid data length supplied by client"); + + return FALSE; + } + if (timed_read (fd, buf, auth_data_len, AUTH_TIMEOUT, 0) != auth_data_len) return FALSE;