capture: properly validate capture length calculated from IP headers #…

…430
irontec · Mar 1, 2023 · 038a658 · 038a658
1 parent e1d2b32
commit 038a658
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/capture.c b/src/capture.c
@@ -616,6 +616,10 @@ capture_packet_reasm_ip(capture_info_t *capinfo, const struct pcap_pkthdr *heade
         }
     }
 
+    // Check maximum capture len
+    if (*caplen > MAX_CAPTURE_LEN)
+        return NULL;
+
     // If no fragmentation
     if (ip_frag == 0) {
         // Just create a new packet with given network data