commit b953d02e8bbaf798302bd33645a8e8d537ac8884
author dschinazi <dschinazi@google.com> Thu Aug 01 18:05:58 2019 -0700
committer Copybara-Service <copybara-worker@google.com> Fri Aug 02 06:20:58 2019 -0700
tree c30f124982e7d95e02ff310dd02079b00341411c
parent 914536425ee6193b2b60169389574eb8c56435e0

Add connection ID length checks

These changes only impact behavior for versions that support variable length connection IDs, and all of those versions are disabled by flags, so we don't need extra flag protection.

gfe-relnote: add connection ID length checks, protected by disabled quic_enable_v47 flag
PiperOrigin-RevId: 261237221
Change-Id: I89e7bec58644b7ec18e3c7ce3ecbd6d93c9c0fc3

quic/core/quic_data_reader.cc

diff --git a/quic/core/quic_data_reader.cc b/quic/core/quic_data_reader.cc
index e2871d7..71395dd 100644
--- a/quic/core/quic_data_reader.cc
+++ b/quic/core/quic_data_reader.cc
@@ -160,7 +160,8 @@
   }
 
   connection_id->set_length(length);
-  const bool ok = ReadBytes(connection_id->mutable_data(), length);
+  const bool ok =
+      ReadBytes(connection_id->mutable_data(), connection_id->length());
   DCHECK(ok);
   return ok;
 }