]> git.ipfire.org Git - thirdparty/snort3.git/commitdiff
dce_smb: prevent underflow in WriteAndX raw request
authorJITHENDIRAN EASWARAMURTHY KOUSALYA <jieaswar@cisco.com>
Tue, 21 Apr 2026 07:25:09 +0000 (12:55 +0530)
committerGitHub <noreply@github.com>
Tue, 21 Apr 2026 07:25:09 +0000 (12:55 +0530)
src/service_inspectors/dce_rpc/dce_smb_commands.cc

index e07ab7676656fc8e1d62d2b85d94e4fed6ed9e14..cb38e7872b3c759bd656e01b8eaa9b9b8034db30 100644 (file)
@@ -352,7 +352,9 @@ static DCE2_Ret DCE2_SmbWriteAndXRawRequest(DCE2_SmbSsnData* ssd, const SmbNtHdr
         if (dcnt < 2)
             return DCE2_RET__ERROR;
 
-        // From data size check above, nb_len >= dsize
+        if (nb_len < 2)
+            return DCE2_RET__ERROR;
+
         dcnt -= 2;
         dce2_move(nb_ptr, nb_len, 2);
     }