diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2021-01-07 10:55:55 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-01-07 10:55:55 +0100 |
| commit | 00dabce65e526a99e7848fe7ab53ac3bd9a68b92 (patch) | |
| tree | 4524c30807bc3906c203175d9d680a7cf6030be3 /src/lib/protocols/tls.c | |
| parent | b8a5358e8010f5e46df528b440cd9cc26910fdb9 (diff) | |
Quic fixes (#1106)
* QUIC: fix heap-buffer-overflow
* TLS: fix parsing of QUIC Transport Parameters
Diffstat (limited to 'src/lib/protocols/tls.c')
| -rw-r--r-- | src/lib/protocols/tls.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index 311532c7f..68d9f2fba 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -1474,7 +1474,7 @@ int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct, #ifdef DEBUG_TLS printf("Client SSL [QUIC TP: Param 0x%x Len %d]\n", (int)param_type, (int)param_len); #endif - if(s_offset+param_len >= final_offset) + if(s_offset+param_len > final_offset) break; if(param_type==0x3129) { |