ensure data is available before reading sessionID length

buschtoens · Jun 13, 2016 · fdd52f1 · fdd52f1
1 parent f8e9075
commit fdd52f1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/index.js b/index.js
@@ -77,6 +77,7 @@ module.exports = function extractSNI (data) {
   pos += 32;
 
   // skip SessionID
+  if (pos > end - 1) return null;
   var sessionIdLength = data[pos];
   pos += 1 + sessionIdLength;