[Snort-devel] ICMP packets header length verification fix

Jeff Nathan jeff at ...835...
Mon Nov 19 11:48:05 EST 2001

currently in DecodeICMP (decode.c), len is compared to sizeof(ICMPHdr)
and if len is less than sizeof(ICMPHdr) p->icmph = NULL.

Rather than enforce a 20 byte minimum ICMP packet length I thought it
might be more appropriate to verify each header length based upon ICMP

A patch is attached.


http://jeff.wwti.com            (pgp key available)
"Common sense is the collection of prejudices acquired by age eighteen."
- Albert Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: decode.diff.gz
Type: application/x-gzip
Size: 845 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20011119/0f268d64/attachment.bin>

More information about the Snort-devel mailing list