diff options
| author | lns <matzeton@googlemail.com> | 2022-06-02 12:32:09 +0200 |
|---|---|---|
| committer | lns <matzeton@googlemail.com> | 2022-06-02 12:33:50 +0200 |
| commit | d65d6324b11e86824f8ecf4eaa36a02d186a0b23 (patch) | |
| tree | 3620b7624dd5feddb614ad1f091ffb06e4d7bd43 /src | |
| parent | 00c62a7c3cbf9e6dbbdb22fcbb611f9f7cc19980 (diff) | |
Fix heap buffer overflow mentioned in #1574.fix/irc-heap-overflow
Signed-off-by: lns <matzeton@googlemail.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/protocols/irc.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/protocols/irc.c b/src/lib/protocols/irc.c index 33c41a4c3..80de27417 100644 --- a/src/lib/protocols/irc.c +++ b/src/lib/protocols/irc.c @@ -517,7 +517,7 @@ void ndpi_search_irc_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc for (i = 0; i < packet->parsed_lines; i++) { if (packet->line[i].len > 6 && memcmp(packet->line[i].ptr, "NOTICE ", 7) == 0) { NDPI_LOG_DBG2(ndpi_struct, "NOTICE"); - for (j = 7; j < packet->line[i].len - 8; j++) { + for (j = 7; j < packet->line[i].len - 9; j++) { if (packet->line[i].ptr[j] == ':') { if (memcmp(&packet->line[i].ptr[j + 1], "DCC SEND ", 9) == 0 || memcmp(&packet->line[i].ptr[j + 1], "DCC CHAT ", 9) == 0) { |