From: Mathew Heard <splitice@users.noreply.github.com>
Date: Tue, 29 Jun 2021 04:48:04 +0000 (+1000)
Subject: Ensure send_udp_probe_packet len is valid for the buffer size.
X-Git-Url: https://git.tinc-vpn.org/git/browse?a=commitdiff_plain;h=9eb34ebfbe763e50b6efb1168dec52331559f7d1;p=tinc

Ensure send_udp_probe_packet len is valid for the buffer size.
---

diff --git a/src/net_packet.c b/src/net_packet.c
index ff9f79cb..25d3efb8 100644
--- a/src/net_packet.c
+++ b/src/net_packet.c
@@ -1087,6 +1087,12 @@ static void send_udp_probe_packet(node_t *n, int len) {
 	vpn_packet_t packet;
 	packet.offset = DEFAULT_PACKET_OFFSET;
 	memset(DATA(&packet), 0, 14);
+
+	if(len > sizeof(packet.data)) {
+		logger(DEBUG_TRAFFIC, LOG_INFO, "Truncating probe length %d to %s (%s)", len, n->name, n->hostname);
+		len = sizeof(packet.data);
+	}
+
 	randomize(DATA(&packet) + 14, len - 14);
 	packet.len = len;
 	packet.priority = 0;