--- src/sync-mode.c | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) diff --git a/src/sync-mode.c b/src/sync-mode.c index bf8ddef..5f78bfb 100644 --- a/src/sync-mode.c +++ b/src/sync-mode.c @@ -100,6 +100,11 @@ static void mcast_handler(void) while (remain > 0) { struct nethdr *net = (struct nethdr *) ptr; + if (remain < sizeof(*net)) { + dlog(LOG_ERR, "packet too small"); + break; + } + if (ntohs(net->len) > remain) { dlog(LOG_ERR, "fragmented messages"); break; - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html