dce_smb: prevent underflow in WriteAndX raw request

diff --git a/src/service_inspectors/dce_rpc/dce_smb_commands.cc b/src/service_inspectors/dce_rpc/dce_smb_commands.cc
index e07ab7676656fc8e1d62d2b85d94e4fed6ed9e14..cb38e7872b3c759bd656e01b8eaa9b9b8034db30 100644 (file)
--- a/src/service_inspectors/dce_rpc/dce_smb_commands.cc
+++ b/src/service_inspectors/dce_rpc/dce_smb_commands.cc
@@ -352,7 +352,9 @@ static DCE2_Ret DCE2_SmbWriteAndXRawRequest(DCE2_SmbSsnData* ssd, const SmbNtHdr
         if (dcnt < 2)
             return DCE2_RET__ERROR;
 
-        // From data size check above, nb_len >= dsize
+        if (nb_len < 2)
+            return DCE2_RET__ERROR;
+
         dcnt -= 2;
         dce2_move(nb_ptr, nb_len, 2);
     }