From 5cb0967a80fb92ff3a2de2fa0c5d7d45e9f29cde Mon Sep 17 00:00:00 2001 From: luqiuwen Date: Fri, 7 Dec 2018 11:25:04 +0600 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=AD=A3SSL=E8=AF=86=E5=88=AB?= =?UTF-8?q?=E8=BF=87=E7=A8=8B=E4=B8=AD=EF=BC=8C=E6=B2=A1=E6=9C=89=E5=88=A4?= =?UTF-8?q?=E6=96=ADSSL=E6=8B=93=E5=B1=95=E8=BE=B9=E7=95=8C=EF=BC=8C?= =?UTF-8?q?=E5=AF=BC=E8=87=B4=E8=B6=8A=E7=95=8C=E8=AF=BB=E7=9A=84=E9=97=AE?= =?UTF-8?q?=E9=A2=98=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- kni_entry.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kni_entry.c b/kni_entry.c index 390a8cf..5efabc2 100644 --- a/kni_entry.c +++ b/kni_entry.c @@ -410,6 +410,7 @@ int kni_judge_ssl(int thread_seq,char* tcp_data,int tcp_datalen,char* sni,int* s //ssl extention ssl_extention=ssl_body+ssl_body_len; + if(ssl_body - tcp_data + ssl_body_len >= tcp_datalen) return KNI_FLAG_UNKNOW; extension_len_less=ntohs(*(unsigned short*)&ssl_extention[ext_offset]); if(extension_len_less!=len_in_body-2-32-1-session_id_len-2-ciphersuite_len-1-compression_method_len-2)