From 480791a057ecf4229c19daf52ea7efc487e58ec0 Mon Sep 17 00:00:00 2001 From: Yingpei Zeng Date: Mon, 16 Apr 2018 16:01:31 +0800 Subject: Add length check before checking a Tor certificate name --- src/lib/protocols/tor.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/protocols/tor.c b/src/lib/protocols/tor.c index 21fc0cf52..462833db0 100644 --- a/src/lib/protocols/tor.c +++ b/src/lib/protocols/tor.c @@ -31,7 +31,7 @@ int ndpi_is_ssl_tor(struct ndpi_detection_module_struct *ndpi_struct, len = strlen(certificate); /* Check if it ends in .com or .net */ - if(strcmp(&certificate[len-4], ".com") && strcmp(&certificate[len-4], ".net")) + if(len>=4 && strcmp(&certificate[len-4], ".com") && strcmp(&certificate[len-4], ".net")) return(0); if((len < 6) -- cgit v1.2.3