admin/mandiant-gopacket
1
0
Fork 0
mirror of https://github.com/mandiant/gopacket synced 2026-06-21 13:57:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #24 from Jah-yee/fix-ace-parsepanic

Browse Source 
security: reject ACE with AceSize below minimum header size
This commit is contained in:
Jacob Paullus
2026-05-11 23:31:51 -05:00
committed by GitHub
parent 33758f735c 6657f2dd4a
commit 3a8420dc5b
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/security/ace.go
+3
View File
@@ -48,6 +48,9 @@ func ParseACE(data []byte) (*ACE, int, error) {
Flags: data[1], Flags: data[1],
} }
aceSize := int(binary.LittleEndian.Uint16(data[2:4])) aceSize := int(binary.LittleEndian.Uint16(data[2:4]))
if aceSize < 8 {
return nil, 0, fmt.Errorf("ACE size %d is below minimum header size of 8", aceSize)
}
if len(data) < aceSize { if len(data) < aceSize {
return nil, 0, fmt.Errorf("ACE size %d exceeds available data %d", aceSize, len(data)) return nil, 0, fmt.Errorf("ACE size %d exceeds available data %d", aceSize, len(data))
} }