From: JITHENDIRAN EASWARAMURTHY KOUSALYA <jieaswar@cisco.com>
Date: Tue, 21 Apr 2026 07:25:09 +0000 (+0530)
Subject: dce_smb: prevent underflow in WriteAndX raw request
X-Git-Tag: 3.12.2.0~3
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=da76493fd8af109c2ce29dd09a4bded1a695f3bc;p=thirdparty%2Fsnort3.git

dce_smb: prevent underflow in WriteAndX raw request
---

diff --git a/src/service_inspectors/dce_rpc/dce_smb_commands.cc b/src/service_inspectors/dce_rpc/dce_smb_commands.cc
index e07ab7676..cb38e7872 100644
--- a/src/service_inspectors/dce_rpc/dce_smb_commands.cc
+++ b/src/service_inspectors/dce_rpc/dce_smb_commands.cc
@@ -352,7 +352,9 @@ static DCE2_Ret DCE2_SmbWriteAndXRawRequest(DCE2_SmbSsnData* ssd, const SmbNtHdr
         if (dcnt < 2)
             return DCE2_RET__ERROR;
 
-        // From data size check above, nb_len >= dsize
+        if (nb_len < 2)
+            return DCE2_RET__ERROR;
+
         dcnt -= 2;
         dce2_move(nb_ptr, nb_len, 2);
     }