Added TLS bounadry check

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c
index 4f395a34d..1abf494d5 100644
--- a/src/lib/protocols/tls.c
+++ b/src/lib/protocols/tls.c
@@ -315,7 +315,7 @@ static void processCertificateElements(struct ndpi_detection_module_struct *ndpi
 
       if((offset+len) < packet->payload_packet_len) {
 	char utcDate[32];
-
+	
 #ifdef DEBUG_TLS
 	u_int j;
 	
@@ -678,7 +678,7 @@ static int ndpi_search_tls_tcp(struct ndpi_detection_module_struct *ndpi_struct,
 	break;
       }
 
-      packet->payload = block, packet->payload_packet_len = block_len+4;
+      packet->payload = block, packet->payload_packet_len = ndpi_min(block_len+4, flow->l4.tcp.tls.message.buffer_used);
 
       if((processed+packet->payload_packet_len) > len) {
 	something_went_wrong = 1;