Fix possible http module panic

zmap/zgrab2#327
COMSYS · Sep 7, 2023 · 88e153f · 88e153f
1 parent b457b28
commit 88e153f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/modules/http/scanner.go b/modules/http/scanner.go
@@ -471,6 +471,12 @@ func (scan *scan) Grab() *zgrab2.ScanError {
 		if readLen < sliceLen {
 			sliceLen = readLen
 		}
+
+		bodyTextLen := int64(len(bodyText))
+		if bodyTextLen < sliceLen {
+			sliceLen = bodyTextLen
+		}
+
 		sliceBuf := bodyText[:sliceLen]
 		if strings.Contains(sliceBuf, "The plain HTTP request was sent to HTTPS port") ||
 			strings.Contains(sliceBuf, "You're speaking plain HTTP") ||