Merge pull request #842 from GabrielGanne/ipv6-extension-ength

ipv6 - add check for extension header length
appneta · Jun 1, 2024 · 77f02cb · 77f02cb
2 parents 914a62e + 52ed633
commit 77f02cb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/common/get.c b/src/common/get.c
@@ -687,6 +687,10 @@ get_ipv6_next(struct tcpr_ipv6_ext_hdr_base *exthdr, const u_char *end_ptr)
     case TCPR_IPV6_NH_HBH:
     case TCPR_IPV6_NH_AH:
         extlen = IPV6_EXTLEN_TO_BYTES(exthdr->ip_len);
+        if (extlen == 0) {
+            dbg(3, "Malformed IPv6 extension header...");
+            return NULL;
+        }
         dbgx(3,
              "Looks like we're an ext header (0x%hhx).  Jumping %u bytes"
              " to the next",