From ce9c864d892fbe4abc6a60e43b28e70bde58ed3c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E4=B8=96=E7=95=8C?= Date: Sat, 11 Nov 2023 23:41:09 +0800 Subject: [PATCH] system: Check UDP invalid packet --- stack_system.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/stack_system.go b/stack_system.go index 6a9598d..dd305fe 100644 --- a/stack_system.go +++ b/stack_system.go @@ -326,6 +326,9 @@ func (s *System) processIPv4UDP(packet clashtcpip.IPv4Packet, header clashtcpip. if packet.FragmentOffset() != 0 { return E.New("ipv4: udp: fragment dropped") } + if !header.Valid() { + return E.New("ipv4: udp: invalid packet") + } source := netip.AddrPortFrom(packet.SourceIP(), header.SourcePort()) destination := netip.AddrPortFrom(packet.DestinationIP(), header.DestinationPort()) if !destination.Addr().IsGlobalUnicast() { @@ -349,6 +352,9 @@ func (s *System) processIPv4UDP(packet clashtcpip.IPv4Packet, header clashtcpip. } func (s *System) processIPv6UDP(packet clashtcpip.IPv6Packet, header clashtcpip.UDPPacket) error { + if !header.Valid() { + return E.New("ipv6: udp: invalid packet") + } source := netip.AddrPortFrom(packet.SourceIP(), header.SourcePort()) destination := netip.AddrPortFrom(packet.DestinationIP(), header.DestinationPort()) if !destination.Addr().IsGlobalUnicast() {