diff --git a/src/modules/module-netjack2/peer.c b/src/modules/module-netjack2/peer.c index 548daa4d0..bec71fe0d 100644 --- a/src/modules/module-netjack2/peer.c +++ b/src/modules/module-netjack2/peer.c @@ -824,7 +824,7 @@ static int netjack2_recv_float(struct netjack2_peer *peer, struct nj2_packet_hea return -errno; active_ports = ntohl(header->active_ports); - if (active_ports == 0) + if (active_ports == 0 || active_ports > MAX_CHANNELS) return 0; uint32_t max_size = PACKET_AVAILABLE_SIZE(peer->params.mtu); @@ -833,11 +833,11 @@ static int netjack2_recv_float(struct netjack2_peer *peer, struct nj2_packet_hea sub_period_size = SPA_MIN(period, (uint32_t)peer->sync.frames); sub_period_bytes = sub_period_size * sizeof(float) + sizeof(int32_t); - if ((size_t)len < active_ports * sub_period_bytes + sizeof(*header)) + if ((size_t)len < (size_t)active_ports * sub_period_bytes + sizeof(*header)) return 0; sub_cycle = ntohl(header->sub_cycle); - if (sub_cycle * sub_period_size > peer->quantum_limit) + if (sub_period_size == 0 || sub_cycle > peer->quantum_limit / sub_period_size) return 0; for (i = 0; i < active_ports; i++) {