mirror of
https://github.com/bol-van/zapret.git
synced 2026-03-08 06:15:26 +00:00
nfqws: fix possible OOB read
This commit is contained in:
@@ -984,6 +984,7 @@ bool IsQUICInitial(const uint8_t *data, size_t len)
|
|||||||
offset += 1 + data[offset];
|
offset += 1 + data[offset];
|
||||||
|
|
||||||
// token length
|
// token length
|
||||||
|
if (offset>=len || (offset + tvb_get_size(data[offset])) > len) return false;
|
||||||
offset += tvb_get_varint(data + offset, &sz);
|
offset += tvb_get_varint(data + offset, &sz);
|
||||||
offset += sz;
|
offset += sz;
|
||||||
if (offset >= len) return false;
|
if (offset >= len) return false;
|
||||||
|
|||||||
Reference in New Issue
Block a user