diff options
| author | Nardi Ivan <nardi.ivan@gmail.com> | 2020-03-26 17:32:17 +0100 |
|---|---|---|
| committer | Nardi Ivan <nardi.ivan@gmail.com> | 2020-03-27 11:09:53 +0100 |
| commit | 9c2c04d8ce966833b83caff902fa2d88afbcdefc (patch) | |
| tree | 72ea9b2db66e01ff79f338e35e396ae10a27f5d0 /src/lib/protocols/ssh.c | |
| parent | 4f399356a67771086632bcdcef94b2db6a0ed9c8 (diff) | |
ssh: fix heap-overflow error
Diffstat (limited to 'src/lib/protocols/ssh.c')
| -rw-r--r-- | src/lib/protocols/ssh.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/lib/protocols/ssh.c b/src/lib/protocols/ssh.c index 390d28042..853fbb24b 100644 --- a/src/lib/protocols/ssh.c +++ b/src/lib/protocols/ssh.c @@ -179,6 +179,8 @@ static u_int16_t concat_hash_string(struct ndpi_packet_struct *packet, offset += 4 + len; /* ssh.compression_algorithms_client_to_server [C] */ + if(offset+sizeof(u_int32_t) >= packet->payload_packet_len) + goto invalid_payload; len = ntohl(*(u_int32_t*)&packet->payload[offset]); if(client_hash) { |