From 83fdfe24d09396f293f6e78ecd341526f339a995 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Wed, 26 Feb 2020 16:16:29 +0100 Subject: Fix read overflow before UDP header --- example/reader_util.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'example/reader_util.c') diff --git a/example/reader_util.c b/example/reader_util.c index 7ab060ef5..f56320976 100644 --- a/example/reader_util.c +++ b/example/reader_util.c @@ -1709,6 +1709,8 @@ ether_type_check: } if(workflow->prefs.decode_tunnels && (proto == IPPROTO_UDP)) { + if (header->caplen < ip_offset + ip_len + sizeof(struct ndpi_udphdr)) + return(nproto); /* Too short for UDP header*/ struct ndpi_udphdr *udp = (struct ndpi_udphdr *)&packet[ip_offset+ip_len]; u_int16_t sport = ntohs(udp->source), dport = ntohs(udp->dest); -- cgit v1.2.3