Merge pull request #10010 from taosdata/fix/TS-487-M

[TS-487]<fix>: added length check for udp rpc

src/rpc/src/rpcUdp.c

@@ -186,9 +186,11 @@ static void *taosRecvUdpData(void *param) {
   SUdpConn          *pConn = param;
   struct sockaddr_in sourceAdd;
   ssize_t            dataLen;
+  int32_t            msgLen;
   unsigned int       addLen;
   uint16_t           port;
   SRecvInfo          recvInfo;
+  SRpcHead          *pHead;
 
   memset(&sourceAdd, 0, sizeof(sourceAdd));
   addLen = sizeof(sourceAdd);
@@ -218,6 +220,13 @@ static void *taosRecvUdpData(void *param) {
       continue;
     }
 
+    pHead = (SRpcHead *)msg;
+    msgLen = (int32_t)htonl((uint32_t)pHead->msgLen);
+    if (dataLen < msgLen) {
+      tError("%s recvfrom failed(%s): dataLen: %ld, msgLen: %d", pConn->label, strerror(errno), (long)dataLen, msgLen);
+      continue;
+    }
+
     int32_t size = dataLen + tsRpcOverhead;
     char *tmsg = malloc(size);
     if (NULL == tmsg) {