nvram: refuse to open NVRAM for writing if it's too big to be handled

[openwrt.git] / package / utils / nvram / src / nvram.c

diff --git a/package/utils/nvram/src/nvram.c b/package/utils/nvram/src/nvram.c
index f2c79ff..0e1c726 100644 (file)
--- a/package/utils/nvram/src/nvram.c
+++ b/package/utils/nvram/src/nvram.c
@@ -389,8 +389,8 @@ nvram_handle_t * nvram_open(const char *file, int rdonly)
 
                                header = nvram_header(h);
 
-                               if( header->magic == NVRAM_MAGIC )
-                               {
+                               if (header->magic == NVRAM_MAGIC &&
+                                   (rdonly || header->len < NVRAM_SPACE)) {
                                        _nvram_rehash(h);
                                        free(mtd);
                                        return h;