aboutsummaryrefslogtreecommitdiffstats
path: root/unmaintained/dsniff/16_TDS_decoder.patch
blob: 4bca9355a37eff77811560ef5478ed4197015d4f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Author: Luciano Bello <luciano@debian.org>
Description: Patch provided by Hilko Bengen. #609988.
--- a/decode_tds.c
+++ b/decode_tds.c
@@ -144,6 +144,11 @@
 	     len > sizeof(*th) && len >= ntohs(th->size);
 	     buf += ntohs(th->size), len -= ntohs(th->size)) {
 		
+		if (th->size != 8) {
+			/* wrong header length */
+			break;
+		}
+
 		if (th->type == 2) {
 			/* Version 4.x, 5.0 */
 			if (len < sizeof(*th) + sizeof(*tl))