diff options
| author | theirix <theirix@gmail.com> | 2016-04-12 22:14:13 +0300 |
|---|---|---|
| committer | theirix <theirix@gmail.com> | 2016-04-12 22:14:13 +0300 |
| commit | c22d3d3cae8fc6d5fcf1b7320a7602426a9b9ca2 (patch) | |
| tree | adebbf469efc03bba8a8d955b5116b35ae50ef3e /src/lib/protocols/dcerpc.c | |
| parent | fb3fc0c6de201a2ab34b6f7ce4d5dfc2c54c3b5e (diff) | |
Fixed more buffer overflows with small packets
Diffstat (limited to 'src/lib/protocols/dcerpc.c')
| -rw-r--r-- | src/lib/protocols/dcerpc.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/src/lib/protocols/dcerpc.c b/src/lib/protocols/dcerpc.c index ec96d1287..7be8ac027 100644 --- a/src/lib/protocols/dcerpc.c +++ b/src/lib/protocols/dcerpc.c @@ -36,13 +36,11 @@ void ndpi_search_dcerpc(struct ndpi_detection_module_struct *ndpi_struct, struct { struct ndpi_packet_struct *packet = &flow->packet; - u_int16_t len_packet = (packet->payload[9]<<8) | packet->payload[8]; - if((packet->tcp != NULL) && (packet->payload_packet_len >= 64) && (packet->payload[0] == 0x05) /* version 5 */ && (packet->payload[2] < 16) /* Packet type */ - && (len_packet == packet->payload_packet_len) /* Packet Length */ + && (((packet->payload[9]<<8) | packet->payload[8]) == packet->payload_packet_len) /* Packet Length */ ) { NDPI_LOG(NDPI_PROTOCOL_DCERPC, ndpi_struct, NDPI_LOG_DEBUG, "DCERPC match\n"); ndpi_int_dcerpc_add_connection(ndpi_struct, flow); |