Fix vuln OSV-2024-393

oss-patch · oss-patch · commit c9ba767bc895 · 2024-12-24T07:57:30.000Z
diff --git a/Packet++/src/BgpLayer.cpp b/Packet++/src/BgpLayer.cpp
@@ -21,7 +21,10 @@ namespace pcpp
 		uint16_t messageLen = be16toh(getBasicHeader()->length);
 		if (m_DataLen < messageLen)
 		{
-			return m_DataLen;
+        if (m_DataLen < sizeof(bgp_common_header))
+        {
+            return m_DataLen;
+        }
 		}
 
 		return (size_t)messageLen;

Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,10 @@ namespace pcpp`
`21`	`21`	`uint16_t messageLen = be16toh(getBasicHeader()->length);`
`22`	`22`	`if (m_DataLen < messageLen)`
`23`	`23`	`{`
`24`		`- return m_DataLen;`
	`24`	`+ if (m_DataLen < sizeof(bgp_common_header))`
	`25`	`+ {`
	`26`	`+ return m_DataLen;`
	`27`	`+ }`
`25`	`28`	`}`
`26`	`29`
`27`	`30`	`return (size_t)messageLen;`