added additional check for IPv4

shadowy-pycoder · shadowy-pycoder · commit adad59e3dc02 · 2025-08-08T21:15:48.000+03:00
diff --git a/layers/ipv4.go b/layers/ipv4.go
@@ -185,6 +185,9 @@ func (p *IPv4Packet) UnmarshalBinary(data []byte) error {
 	}
 	if p.IHL > 5 {
 		offset := headerSizeIPv4 + ((p.IHL - 5) << 2)
+		if int(offset) > len(buf) {
+			return ErrSliceBounds
+		}
 		p.Options = buf[headerSizeIPv4:offset]
 		p.Payload = buf[offset:]
 	} else {
