From f452dabd929a18304c3d84c02d24dc9e9245fded Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Fri, 17 Jul 2020 23:26:28 +0200
Subject: Fix for invalid boundary check

---
 src/lib/protocols/tls.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c
index d938d53e9..ed0823547 100644
--- a/src/lib/protocols/tls.c
+++ b/src/lib/protocols/tls.c
@@ -922,7 +922,7 @@ int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct,
       for(i=0; i<extension_len; ) {
 	u_int16_t extension_id, extension_len;
 
-	if(offset >= (packet->payload_packet_len+4)) break;
+	if((offset+4) > packet->payload_packet_len) break;
 
 	extension_id  = ntohs(*((u_int16_t*)&packet->payload[offset]));
 	extension_len = ntohs(*((u_int16_t*)&packet->payload[offset+2]));
-- 
cgit v1.2.3