From 6fe95358812323fcf614fba8f8e5a43f43d164bb Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Wed, 26 Feb 2020 17:12:46 +0100 Subject: Adds check before memcpy for bittorrent --- src/lib/protocols/bittorrent.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/protocols/bittorrent.c b/src/lib/protocols/bittorrent.c index a1ade79b2..d0773e43a 100644 --- a/src/lib/protocols/bittorrent.c +++ b/src/lib/protocols/bittorrent.c @@ -72,7 +72,7 @@ static void ndpi_add_connection_as_bittorrent(struct ndpi_detection_module_struc } else bt_hash = (const char*)&flow->packet.payload[28]; - if(bt_hash) memcpy(flow->protos.bittorrent.hash, bt_hash, 20); + if(bt_hash && flow->packet.payload_packet_len >= 20 + (bt_hash-flow->packet.payload)) memcpy(flow->protos.bittorrent.hash, bt_hash, 20); } ndpi_int_change_protocol(ndpi_struct, flow, NDPI_PROTOCOL_BITTORRENT, NDPI_PROTOCOL_UNKNOWN); -- cgit v1.2.3