From 7051acc0b5b8046b6415a454a2eff4fffa18396b Mon Sep 17 00:00:00 2001
From: Toni Uhlig <matzeton@googlemail.com>
Date: Wed, 2 Sep 2020 07:37:26 +0200
Subject: Fixed off-by-one error in Kerberos protocol.

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
---
 src/lib/protocols/kerberos.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/lib/protocols')

diff --git a/src/lib/protocols/kerberos.c b/src/lib/protocols/kerberos.c
index 168586643..10c2b5a65 100644
--- a/src/lib/protocols/kerberos.c
+++ b/src/lib/protocols/kerberos.c
@@ -309,7 +309,7 @@ void ndpi_search_kerberos(struct ndpi_detection_module_struct *ndpi_struct,
 		printf("name_offset=%u [%02X %02X] [byte 0 must be 0x1b]\n", name_offset, packet->payload[name_offset], packet->payload[name_offset+1]);
 #endif
 
-		if(name_offset < (packet->payload_packet_len+1)) {
+		if(name_offset < (packet->payload_packet_len - 1)) {
 		  u_int realm_len;
 
 		  name_offset++;
-- 
cgit v1.2.3