ipv6 - add check for extension header length

Fixes appneta#827
GabrielGanne · Jan 21, 2024 · 334ec5b · 334ec5b
1 parent 43693c4
commit 334ec5b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/common/get.c b/src/common/get.c
@@ -663,6 +663,10 @@ get_ipv6_next(struct tcpr_ipv6_ext_hdr_base *exthdr, const u_char *end_ptr)
     case TCPR_IPV6_NH_HBH:
     case TCPR_IPV6_NH_AH:
         extlen = IPV6_EXTLEN_TO_BYTES(exthdr->ip_len);
+        if (extlen == 0) {
+            dbg(3, "Malformed IPv6 extension header...");
+            return NULL;
+        }
         dbgx(3,
              "Looks like we're an ext header (0x%hhx).  Jumping %u bytes"
              " to the next",