From 7b690d8b2d67ae5096941abae536ecdf75bf4540 Mon Sep 17 00:00:00 2001 From: Nardi Ivan Date: Wed, 1 Apr 2020 16:23:28 +0200 Subject: kerberos: fix heap-overflow error --- src/lib/protocols/kerberos.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols') diff --git a/src/lib/protocols/kerberos.c b/src/lib/protocols/kerberos.c index 2aa73dd39..ff16545f5 100644 --- a/src/lib/protocols/kerberos.c +++ b/src/lib/protocols/kerberos.c @@ -189,7 +189,7 @@ void ndpi_search_kerberos(struct ndpi_detection_module_struct *ndpi_struct, body_offset = koffsetp + 1 + pad_len; - for(i=0; i<10; i++) if(packet->payload[body_offset] != 0x05) body_offset++; /* ASN.1 */ + for(i=0; i<10; i++) if(body_offsetpayload_packet_len && packet->payload[body_offset] != 0x05) body_offset++; /* ASN.1 */ #ifdef KERBEROS_DEBUG printf("body_offset=%u [%02X %02X] [byte 0 must be 0x05]\n", body_offset, packet->payload[body_offset], packet->payload[body_offset+1]); #endif -- cgit v1.2.3