if the entry is too large for the buffer, discard the file

diff --git a/src/modules/proto_detail/proto_detail_work.c b/src/modules/proto_detail/proto_detail_work.c
index e5b5d4bc98b4301abc5c2bbf96b62e8165c0798e..1a205cb464c53ee64d58a53ae5adf93f8050c66e 100644 (file)
--- a/src/modules/proto_detail/proto_detail_work.c
+++ b/src/modules/proto_detail/proto_detail_work.c
@@ -337,6 +337,14 @@ redo:
                MPRINT("FOUND next at %zd, leftover is %zd", packet_len, *leftover);
 
        } else if (!inst->eof) {
+               if ((end - buffer) == buffer_len) {
+                       ERROR("proto_detail (%s): Too large entry (>%d bytes) found at offset %zu: %.*s of file %s",
+                             inst->name, buffer_len,
+                             (size_t)((p - buffer) + inst->header_offset), (int) (end - p), p,
+                             inst->filename_work);
+                       return -1;
+               }
+
                /*
                 *      We're not at EOF, and there is no "next"
                 *      entry.  Remember all of the leftover data in