diff --git a/server/dispatcher.c b/server/dispatcher.c index 4e03ea04..6f2c4d85 100644 --- a/server/dispatcher.c +++ b/server/dispatcher.c @@ -285,6 +285,10 @@ static int dispatcher_handle_single_read(Dispatcher *dispatcher) /* no messsage */ return 0; } + if (type >= dispatcher->priv->max_message_type) { + spice_error("Invalid message type for this dispatcher: %u", type); + return 0; + } msg = &dispatcher->priv->messages[type]; if (read_safe(dispatcher->priv->recv_fd, payload, msg->size, 1) == -1) { spice_printerr("error reading from dispatcher: %d", errno);