diff options
| author | Michele Campus <fci1908@gmail.com> | 2016-04-12 23:41:02 +0200 |
|---|---|---|
| committer | Michele Campus <fci1908@gmail.com> | 2016-04-12 23:41:02 +0200 |
| commit | da811fbdd0023a0a3dc3f810029ef92e83e1f781 (patch) | |
| tree | 5e75a520f4c2f12ab85b22914f15c8f0857f132e /src/lib/protocols/radius.c | |
| parent | 885cc3864eccaa0eaadff7233f5a6a94c4239e24 (diff) | |
| parent | d7a2515093ce64d29020c0768956c6ead1ae23da (diff) | |
Merge pull request #173 from theirix/buffer-overflows
Fixed multiple buffer overflows
Diffstat (limited to 'src/lib/protocols/radius.c')
| -rw-r--r-- | src/lib/protocols/radius.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/src/lib/protocols/radius.c b/src/lib/protocols/radius.c index 625dc4108..308049522 100644 --- a/src/lib/protocols/radius.c +++ b/src/lib/protocols/radius.c @@ -37,12 +37,11 @@ static void ndpi_check_radius(struct ndpi_detection_module_struct *ndpi_struct, if(packet->udp != NULL) { struct radius_header *h = (struct radius_header*)packet->payload; - u_int len = ntohs(h->len); if((payload_len > sizeof(struct radius_header)) && (h->code > 0) && (h->code <= 5) - && (len == payload_len)) { + && (ntohs(h->len) == payload_len)) { NDPI_LOG(NDPI_PROTOCOL_RADIUS, ndpi_struct, NDPI_LOG_DEBUG, "Found radius.\n"); ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_RADIUS, NDPI_PROTOCOL_UNKNOWN); |