From: Matt Corallo <git@bluematt.me>
Date: Mon, 23 Jul 2018 18:53:34 +0000 (-0400)
Subject: Fix OOM crash in ChannelMonitor::deserialize found by AFL
X-Git-Tag: v0.0.12~373^2
X-Git-Url: http://git.bitcoin.ninja/index.cgi?a=commitdiff_plain;h=ab22bed7edfdf14e234fd333267b700ba59b093a;p=rust-lightning

Fix OOM crash in ChannelMonitor::deserialize found by AFL
---

diff --git a/src/ln/channelmonitor.rs b/src/ln/channelmonitor.rs
index 2ee5b37a3..3fb1d8ad8 100644
--- a/src/ln/channelmonitor.rs
+++ b/src/ln/channelmonitor.rs
@@ -743,7 +743,7 @@ impl ChannelMonitor {
 		for _ in 0..remote_claimable_outpoints_len {
 			let txid = Sha256dHash::from(read_bytes!(32));
 			let outputs_count = byte_utils::slice_to_be64(read_bytes!(8));
-			if outputs_count > data.len() as u64 * 32 { return None; }
+			if outputs_count > data.len() as u64 / 32 { return None; }
 			let mut outputs = Vec::with_capacity(outputs_count as usize);
 			for _ in 0..outputs_count {
 				outputs.push(read_htlc_in_commitment!());