diff options
| author | Philippe Antoine <contact@catenacyber.fr> | 2020-03-19 16:54:31 +0100 |
|---|---|---|
| committer | Philippe Antoine <contact@catenacyber.fr> | 2020-03-19 16:54:31 +0100 |
| commit | c6acf97bfbe5ad26db3c2f5dd4d379ac674d6fb3 (patch) | |
| tree | 39c8df162295fa16620a5a0491b107a39ead71e5 /src/lib/protocols/yahoo.c | |
| parent | e9195589d29d86da1849ad0d195900e6567354cf (diff) | |
Adds different checks against overflows
Diffstat (limited to 'src/lib/protocols/yahoo.c')
| -rw-r--r-- | src/lib/protocols/yahoo.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/lib/protocols/yahoo.c b/src/lib/protocols/yahoo.c index bd7f3ef66..d80e9caee 100644 --- a/src/lib/protocols/yahoo.c +++ b/src/lib/protocols/yahoo.c @@ -76,6 +76,9 @@ u_int8_t check_ymsg(const u_int8_t * payload, u_int16_t payload_packet_len) if(ylen >= payload_packet_len || yahoo_len_parsed >= payload_packet_len) break; + if (payload_packet_len < yahoo_len_parsed + sizeof(struct ndpi_yahoo_header)) { + return 0; + } yahoo = (struct ndpi_yahoo_header *) (payload + yahoo_len_parsed); } while(memcmp(yahoo->YMSG_str, "YMSG", 4) == 0); |