[Snort-devel] ICMP packets header length verification fix

Jeff Nathan jeff at ...835...
Mon Nov 19 11:48:05 EST 2001



currently in DecodeICMP (decode.c), len is compared to sizeof(ICMPHdr)
and if len is less than sizeof(ICMPHdr) p->icmph = NULL.

Rather than enforce a 20 byte minimum ICMP packet length I thought it
might be more appropriate to verify each header length based upon ICMP
type.

A patch is attached.

-Jeff

-- 
http://jeff.wwti.com            (pgp key available)
"Common sense is the collection of prejudices acquired by age eighteen."
- Albert Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: decode.diff.gz
Type: application/x-gzip
Size: 845 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20011119/0f268d64/attachment.bin>


More information about the Snort-devel mailing list