From 9eb34ebfbe763e50b6efb1168dec52331559f7d1 Mon Sep 17 00:00:00 2001 From: Mathew Heard Date: Tue, 29 Jun 2021 14:48:04 +1000 Subject: [PATCH] Ensure send_udp_probe_packet len is valid for the buffer size. --- src/net_packet.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/net_packet.c b/src/net_packet.c index ff9f79cb..25d3efb8 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -1087,6 +1087,12 @@ static void send_udp_probe_packet(node_t *n, int len) { vpn_packet_t packet; packet.offset = DEFAULT_PACKET_OFFSET; memset(DATA(&packet), 0, 14); + + if(len > sizeof(packet.data)) { + logger(DEBUG_TRAFFIC, LOG_INFO, "Truncating probe length %d to %s (%s)", len, n->name, n->hostname); + len = sizeof(packet.data); + } + randomize(DATA(&packet) + 14, len - 14); packet.len = len; packet.priority = 0; -- 2.20.1