File libssh2_org-CVE-2019-3855.patch of Package libssh2_org.13039
diff --git a/src/transport.c b/src/transport.c
index 8725da0..1c5a13c 100644
--- a/src/transport.c
+++ b/src/transport.c
@@ -438,6 +438,12 @@ int _libssh2_transport_read(LIBSSH2_SESSION * session)
return LIBSSH2_ERROR_DECRYPT;
p->padding_length = block[4];
+ if(p->packet_length < 1) {
+ return LIBSSH2_ERROR_DECRYPT;
+ }
+ else if(p->packet_length > LIBSSH2_PACKET_MAXPAYLOAD) {
+ return LIBSSH2_ERROR_OUT_OF_BOUNDARY;
+ }
/* total_num is the number of bytes following the initial
(5 bytes) packet length and padding length fields */