OMPUB-527: 从解密后的client hello负载中解析user agent参数时,未对参数长度负值进行判断导致parse_quic_transport_parameter函数死循环触发sapp的watchdog timeout
This commit is contained in:
@@ -376,7 +376,11 @@ int parse_quic_transport_parameter(struct quic_client_hello *client_hello, const
|
||||
para_offset+=copy_extension_tag(quic_para+para_offset, one_para_length, &client_hello->user_agent, thread_seq);
|
||||
return 1;
|
||||
default:
|
||||
one_para_length=quic_para[para_offset++]; // length=1
|
||||
one_para_length=(int)(quic_para[para_offset++]); // length=1
|
||||
if(one_para_length<0 || one_para_length>quic_para_len)
|
||||
{
|
||||
break;
|
||||
}
|
||||
para_offset+=one_para_length;
|
||||
break;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user