diff options
| author | Philippe Antoine <contact@catenacyber.fr> | 2020-04-15 15:42:54 +0200 |
|---|---|---|
| committer | Philippe Antoine <contact@catenacyber.fr> | 2020-04-15 15:42:54 +0200 |
| commit | 4ec3e6c064b56f1434bd4c887bd96d0916d07f2e (patch) | |
| tree | 1d0a58c35de817a3bea2a2f0893a5d081e7d30dd /src/lib/protocols/tls.c | |
| parent | 81e97d75153e38ce024a308b75d64edeb4b5e9bb (diff) | |
Adds bound check in TLS
Diffstat (limited to 'src/lib/protocols/tls.c')
| -rw-r--r-- | src/lib/protocols/tls.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index 77d69a6fe..ef2c0a86e 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -1069,7 +1069,7 @@ int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct, s_offset += 2; tot_alpn_len += s_offset; - while(s_offset < tot_alpn_len) { + while(s_offset < tot_alpn_len && s_offset < total_len) { u_int8_t alpn_i, alpn_len = packet->payload[s_offset++]; if((s_offset + alpn_len) <= tot_alpn_len) { |