diff options
| author | Luca Deri <deri@ntop.org> | 2020-09-10 20:06:25 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2020-09-10 20:06:25 +0200 |
| commit | 37abe0daea8c964dbd2e09058074bfc7ae053199 (patch) | |
| tree | e01390955688b79101e051faec2d17a4c5486266 /src/lib/protocols/kerberos.c | |
| parent | 1c0e617d802d214b0186f2752b50b8ee2a9e17a6 (diff) | |
Added boundary check
Diffstat (limited to 'src/lib/protocols/kerberos.c')
| -rw-r--r-- | src/lib/protocols/kerberos.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/protocols/kerberos.c b/src/lib/protocols/kerberos.c index 10c2b5a65..fa0ab6cb6 100644 --- a/src/lib/protocols/kerberos.c +++ b/src/lib/protocols/kerberos.c @@ -252,7 +252,9 @@ void ndpi_search_kerberos(struct ndpi_detection_module_struct *ndpi_struct, realm_offset = cname_len + name_offset + 3; /* if cname does not end with a $ then it's a username */ - if(cname_len && cname_str[cname_len-1] == '$') { + if(cname_len + && (cname_len < sizeof(cname_str)) + && (cname_str[cname_len-1] == '$')) { cname_str[cname_len-1] = '\0'; snprintf(flow->protos.kerberos.hostname, sizeof(flow->protos.kerberos.hostname), "%s", cname_str); } else |