gfwleak/tango-verify-policy
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-2641 修复策略验证命中策略超过16条，越界问题

Browse Source
This commit is contained in:
fengweihao
2020-07-30 10:38:02 +08:00
parent 4a5d3bb373
commit afab73ad5f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scan/src/pangu_http.cpp
View File

@@ -355,7 +355,7 @@ static enum pangu_action decide_ctrl_action(const struct Maat_rule_t * hit_rules
struct Maat_rule_t monit_rule[n_hit]; struct Maat_rule_t monit_rule[n_hit];
enum pangu_action prior_action = PG_ACTION_NONE; enum pangu_action prior_action = PG_ACTION_NONE;
for (i = 0; i < n_hit; i++) for (i = 0; i < n_hit && i < MAX_SCAN_RESULT ; i++)
{ {
unsigned char __expand_action = (unsigned char) hit_rules[i].action; unsigned char __expand_action = (unsigned char) hit_rules[i].action;
enum pangu_action __action = (enum pangu_action) __expand_action; enum pangu_action __action = (enum pangu_action) __expand_action;
@@ -493,6 +493,8 @@ static int http_hit_policy_list(Maat_feather_t maat, size_t hit_cnt, cJSON *data
return 0; return 0;
} }
if (hit_cnt >= MAX_SCAN_RESULT) hit_cnt = MAX_SCAN_RESULT;
ret = Maat_rule_sort_by_evaluation_order(maat, ctx->result, hit_cnt); ret = Maat_rule_sort_by_evaluation_order(maat, ctx->result, hit_cnt);
if (ret != hit_cnt) if (ret != hit_cnt)
{ {