ssh: fix out of bounds read in banner parsing

Reported-by: Henning Perl
8 years ago · 9ba89a31ef
parent 843d0b7a10
commit 9ba89a31ef
1 changed files with 1 additions and 1 deletions
--- a/src/app-layer-ssh.c
+++ b/src/app-layer-ssh.c
@ -69,7 +69,7 @@ static int SSHParseBanner(SshState *state, SshHeader *header, const uint8_t *inp
    uint32_t line_len = input_len;

    /* is it the version line? */
-    if (SCMemcmp("SSH-", line_ptr, 4) != 0) {
+    if (line_len >= 4 && SCMemcmp("SSH-", line_ptr, 4) != 0) {
        SCReturnInt(-1);
    }