CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-27 03:48:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Check for tcp th_off < 5

Browse source
This commit is contained in:
dmiller 2026-06-26 22:06:05 +00:00
parent 4651a54b4b
commit b5c54d9687
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
osscan2.cc
View file

@ -1908,7 +1908,8 @@ bool HostOsScan::processResp(HostOsScanStats *hss, const u8 *pkt, unsigned int l
if (len < sizeof(tcp))
return false;
memcpy(&tcp, l4pkt, sizeof(tcp));
if (len < (unsigned int)(4 * tcp.th_off))
const unsigned int tcphlen = 4 * tcp.th_off;
if (tcphlen < sizeof(tcp) || len < tcphlen)
return false;
testno = ntohs(tcp.th_dport) - tcpPortBase;