mirror of
https://github.com/weaveworks/scope.git
synced 2026-07-28 09:41:57 +00:00
The header checking code was unsafe because: 1. It was accessing the byteslice at [2] without ensuring a length >= 3 2. It was assuming that the indentation of the 'sl' header is always 2 (which seems to be the case in recent kernels8f18e4d03e/net/ipv4/tcp_ipv4.c (L2304)and8f18e4d03e/net/ipv6/tcp_ipv6.c (L1831)) but it's more robust to simply trim the byteslice.
5.0 KiB
5.0 KiB