Fix missing length check in PgSQL (elastic#5457) (elastic#5480)

tsg · andrewkroh · commit 9dd91482ca41 · 2017-10-30T17:11:00.000-04:00
There was a length check missing. (cherry picked from commit aeca657)
diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
@@ -38,6 +38,8 @@ https://github.com/elastic/beats/compare/v5.6.3...5.6[Check the HEAD diff]
 
 *Packetbeat*
 
+- Fix missing length check in the PostgreSQL module. {pull}5457[5457]
+
 *Winlogbeat*
 
 ==== Added
diff --git a/packetbeat/protos/pgsql/parse.go b/packetbeat/protos/pgsql/parse.go
@@ -379,6 +379,9 @@ func pgsqlFieldsParser(s *pgsqlStream, buf []byte) error {
 		off += 4
 
 		// read format (int16)
+		if len(buf) < off+2 {
+			return errFieldBufferShort
+		}
 		format := common.BytesNtohs(buf[off : off+2])
 		off += 2
 		fieldsFormat = append(fieldsFormat, byte(format))
