X-Git-Url: https://git.lttng.org/?p=lttng-tools.git;a=blobdiff_plain;f=src%2Fcommon%2Factions%2Fsnapshot-session.c;h=8b23d58e70aafb81e09893e37c02dc8b6a3199c6;hp=7576838650609b245f25f202ca491b3084797d50;hb=3e6e0df2f8f9f23d252c2508b6d741916dfcc4b3;hpb=8a82be4c62d09a7ef4792c0eed7c7903dfac8424

diff --git a/src/common/actions/snapshot-session.c b/src/common/actions/snapshot-session.c
index 757683865..8b23d58e7 100644
--- a/src/common/actions/snapshot-session.c
+++ b/src/common/actions/snapshot-session.c
@@ -211,18 +211,26 @@ ssize_t lttng_action_snapshot_session_create_from_payload(
 		struct lttng_action **p_action)
 {
 	ssize_t consumed_len;
-	const struct lttng_action_snapshot_session_comm *comm;
 	const char *variable_data;
 	struct lttng_action *action;
 	enum lttng_action_status status;
 	struct lttng_snapshot_output *snapshot_output = NULL;
+	const struct lttng_action_snapshot_session_comm *comm;
+	const struct lttng_payload_view snapshot_session_comm_view =
+			lttng_payload_view_from_view(
+				view, 0, sizeof(*comm));
 
 	action = lttng_action_snapshot_session_create();
 	if (!action) {
 		goto error;
 	}
 
-	comm = (typeof(comm)) view->buffer.data;
+	if (!lttng_payload_view_is_valid(&snapshot_session_comm_view)) {
+		/* Payload not large enough to contain the header. */
+		goto error;
+	}
+
+	comm = (typeof(comm)) snapshot_session_comm_view.buffer.data;
 	variable_data = (const char *) &comm->data;
 
 	consumed_len = sizeof(struct lttng_action_snapshot_session_comm);
@@ -249,7 +257,7 @@ ssize_t lttng_action_snapshot_session_create_from_payload(
 			lttng_payload_view_from_view(view, consumed_len,
 				comm->snapshot_output_len);
 
-		if (!snapshot_output_buffer_view.buffer.data) {
+		if (!lttng_payload_view_is_valid(&snapshot_output_buffer_view)) {
 			ERR("Failed to create buffer view for snapshot output.");
 			goto error;
 		}