From f5ffcbccec63ff5303c080cea6536fde9ef168f1 Mon Sep 17 00:00:00 2001 From: ppeb Date: Mon, 28 Apr 2025 15:15:16 -0500 Subject: [PATCH] Add length check to natneg handleReport --- natneg/report.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/natneg/report.go b/natneg/report.go index 0dfb1c6..c09c5b9 100644 --- a/natneg/report.go +++ b/natneg/report.go @@ -9,7 +9,12 @@ import ( "github.com/logrusorgru/aurora/v3" ) -func (session *NATNEGSession) handleReport(conn net.PacketConn, addr net.Addr, buffer []byte, _ string, version byte) { +func (session *NATNEGSession) handleReport(conn net.PacketConn, addr net.Addr, buffer []byte, _moduleName string, version byte) { + if len(buffer) < 2 { + logging.Error(_moduleName, "Invalid packet size") + return + } + response := createPacketHeader(version, NNReportReply, session.Cookie) response = append(response, buffer[:9]...) response[14] = 0