Merge pull request #11946 from Dehravor/cata-crash

Core/WorldSocket: Fix crash when CMSG_AUTH_SESSION contains modified addon size value

1 files changed, 6 insertions, 2 deletions

diff --git a/src/server/game/Server/WorldSocket.cpp b/src/server/game/Server/WorldSocket.cpp
index 161fd61796f..737a2f8cbf1 100644
--- a/src/server/game/Server/WorldSocket.cpp
+++ b/src/server/game/Server/WorldSocket.cpp
@@ -835,8 +835,12 @@ int WorldSocket::HandleAuthSession(WorldPacket& recvPacket)
     recvPacket >> digest[13];
 
     recvPacket >> addonSize;
-    addonsData.resize(addonSize);
-    recvPacket.read((uint8*)addonsData.contents(), addonSize);
+
+    if (addonSize)
+    {
+        addonsData.resize(addonSize);
+        recvPacket.read((uint8*)addonsData.contents(), addonSize);
+    }
 
     recvPacket.ReadBit();
     uint32 accountNameLength = recvPacket.ReadBits(12);