From 9b2ad15cd3d7ab48957e5a189277f80ed5271e8c Mon Sep 17 00:00:00 2001 From: Willem Noort Date: Thu, 24 Mar 2016 13:52:19 +0100 Subject: [PATCH] Fix Integer overflow in BitcoinSerializer.BitcoinPacketHeader --- core/src/main/java/org/bitcoinj/core/BitcoinSerializer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/src/main/java/org/bitcoinj/core/BitcoinSerializer.java b/core/src/main/java/org/bitcoinj/core/BitcoinSerializer.java index 54c2a08c..5f3ea070 100644 --- a/core/src/main/java/org/bitcoinj/core/BitcoinSerializer.java +++ b/core/src/main/java/org/bitcoinj/core/BitcoinSerializer.java @@ -367,7 +367,7 @@ public class BitcoinSerializer extends MessageSerializer { size = (int) readUint32(header, cursor); cursor += 4; - if (size > Message.MAX_SIZE) + if (size > Message.MAX_SIZE || size < 0) throw new ProtocolException("Message size too large: " + size); // Old clients don't send the checksum.