nfqws: prevent out-of-bound access

3 years ago · 7df1be9d3e
1 changed files with 1 additions and 1 deletions
--- a/nfq/protocol.c
+++ b/nfq/protocol.c
@ -462,7 +462,7 @@ bool QUICDefragCrypto(const uint8_t *clean,size_t clean_len, uint8_t *defrag,siz
 			if (pos>=clean_len) return false;
-			if ((pos+tvb_get_size(clean[pos])>clean_len)) return false;
+			if ((pos+tvb_get_size(clean[pos])>=clean_len)) return false;
 			pos += tvb_get_varint(clean+pos, &offset);
 			if ((pos+tvb_get_size(clean[pos])>clean_len)) return false;