Merge pull request #1824 from chipitsine/master

src/Cedar/Proto_OpenVPN.c: fix denial of service found by Cisco Talos
SoftEtherVPN · Apr 16, 2023 · 82ce34f · 82ce34f
2 parents 6ff0ce7 + d2e673a
commit 82ce34f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Cedar/Proto_OpenVPN.c b/src/Cedar/Proto_OpenVPN.c
@@ -147,7 +147,7 @@ bool OvsProcessData(void *param, TCP_RAW_DATA *in, FIFO *out)
 		payload_size = READ_USHORT(FifoPtr(fifo));
 		packet_size = payload_size + sizeof(USHORT);
 
-		if (payload_size == 0 || packet_size > sizeof(buf))
+		if (payload_size == 0 || payload_size > (sizeof(buf) - sizeof(USHORT)))
 		{
 			ret = false;
 			Debug("OvsProcessData(): Invalid payload size: %u bytes\n", payload_size);