diff --git a/src/switch_stun.c b/src/switch_stun.c index c853a08149..55f8a65eac 100644 --- a/src/switch_stun.c +++ b/src/switch_stun.c @@ -129,7 +129,8 @@ SWITCH_DECLARE(switch_stun_packet_t *) switch_stun_packet_parse(uint8_t *buf, ui packet = (switch_stun_packet_t *) buf; packet->header.type = ntohs(packet->header.type); packet->header.length = ntohs(packet->header.length); - bytes_left -= 20; + if (packet->header.length > (bytes_left -= 20)) + return NULL; /*