#3986 Packet ring crash in memcpy

packet_size was negative
2025-04-25 21:31:43 +03:00 · 2025-04-25 21:31:43 +03:00 · 8665cd3750
parent 17e974689c
commit 8665cd3750
1 changed files with 8 additions and 2 deletions
--- a/indra/llmessage/llpacketring.cpp
+++ b/indra/llmessage/llpacketring.cpp
@ -209,8 +209,14 @@ S32 LLPacketRing::receiveOrDropBufferedPacket(char *datap, bool drop)

    if (!drop)
    {
-        assert(packet_size > 0);
-        memcpy(datap, packet->getData(), packet_size);
+        if (packet_size > 0)
+        {
+            memcpy(datap, packet->getData(), packet_size);
+        }
+        else
+        {
+            assert(false);
+        }
    }
    else
    {