diff options
| author | Luca Deri <lucaderi@users.noreply.github.com> | 2020-03-20 18:02:27 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-20 18:02:27 +0100 |
| commit | a845e997209b987ef85a2562697d4d0522cb0c66 (patch) | |
| tree | 04a9b505c8af0b5f4d8c32a774edfaf9936fbd1c /src/lib/protocols/yahoo.c | |
| parent | 8cda02bb14bad44ae71317b322d895305245e713 (diff) | |
| parent | 3e259aac986bc86aa89adc2994811bb6f26a0649 (diff) | |
Merge pull request #859 from catenacyber/fuzzudpfix
Checks enough data for UDP header
Diffstat (limited to 'src/lib/protocols/yahoo.c')
| -rw-r--r-- | src/lib/protocols/yahoo.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/lib/protocols/yahoo.c b/src/lib/protocols/yahoo.c index bd7f3ef66..d80e9caee 100644 --- a/src/lib/protocols/yahoo.c +++ b/src/lib/protocols/yahoo.c @@ -76,6 +76,9 @@ u_int8_t check_ymsg(const u_int8_t * payload, u_int16_t payload_packet_len) if(ylen >= payload_packet_len || yahoo_len_parsed >= payload_packet_len) break; + if (payload_packet_len < yahoo_len_parsed + sizeof(struct ndpi_yahoo_header)) { + return 0; + } yahoo = (struct ndpi_yahoo_header *) (payload + yahoo_len_parsed); } while(memcmp(yahoo->YMSG_str, "YMSG", 4) == 0); |