From 4b720c4f3c8e74950e1c2b1c6dc10aa2c4c4c73e Mon Sep 17 00:00:00 2001 From: Yingpei Zeng Date: Mon, 16 Apr 2018 16:07:01 +0800 Subject: Add length check before do memcmp to "x-steam-sid" in http.c --- src/lib/protocols/http.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/protocols/http.c b/src/lib/protocols/http.c index ed8d0cd13..7332c5e04 100644 --- a/src/lib/protocols/http.c +++ b/src/lib/protocols/http.c @@ -663,7 +663,7 @@ static void ndpi_check_http_tcp(struct ndpi_detection_module_struct *ndpi_struct /* Check for additional field introduced by Steam */ int x = 1; - if((memcmp(packet->line[x].ptr, "x-steam-sid", 11)) == 0) { + if(packet->line[x].len >= 11 && (memcmp(packet->line[x].ptr, "x-steam-sid", 11)) == 0) { NDPI_LOG_INFO(ndpi_struct, "found STEAM\n"); ndpi_int_http_add_connection(ndpi_struct, flow, NDPI_PROTOCOL_STEAM); check_content_type_and_change_protocol(ndpi_struct, flow); -- cgit v1.2.3