From c6acf97bfbe5ad26db3c2f5dd4d379ac674d6fb3 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Thu, 19 Mar 2020 16:54:31 +0100 Subject: Adds different checks against overflows --- src/lib/protocols/dns.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/dns.c') diff --git a/src/lib/protocols/dns.c b/src/lib/protocols/dns.c index 8290ca9dc..460117c96 100644 --- a/src/lib/protocols/dns.c +++ b/src/lib/protocols/dns.c @@ -141,7 +141,7 @@ static int search_valid_dns(struct ndpi_detection_module_struct *ndpi_struct, /* Leave the statement below commented necessary in case of call to ndpi_get_partial_detection() */ x++; - if(flow->packet.payload[x] != '\0') { + if(x < flow->packet.payload_packet_len && flow->packet.payload[x] != '\0') { while((x < flow->packet.payload_packet_len) && (flow->packet.payload[x] != '\0')) { x++; -- cgit v1.2.3