fix AMF crash on malformed NAS message (#118)

free5gc · Jan 9, 2024 · 9458f79 · 9458f79
1 parent 68013ee
commit 9458f79
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/internal/nas/nas_security/security.go b/internal/nas/nas_security/security.go
@@ -362,6 +362,9 @@ func DecodePlainNasNoIntegrityCheck(payload []byte) (*nas.Message, error) {
 
 	if msg.SecurityHeaderType != nas.SecurityHeaderTypePlainNas {
 		// remove security Header
+		if len(payload) < 7 {
+			return nil, fmt.Errorf("nas payload is too short")
+		}
 		payload = payload[7:]
 	}