Check socket address size

auparse/sockaddr.go

@@ -18,10 +18,20 @@
 package auparse
 
 import (
+	"errors"
 	"strconv"
 )
 
+var (
+	// errInvalidSockAddrSize means socket address size is invalid.
+	errInvalidSockAddrSize = errors.New("invalid socket address size")
+)
+
 func parseSockaddr(s string) (map[string]string, error) {
+	if len(s) < 4 {
+		return nil, errInvalidSockAddrSize
+	}
+
 	addressFamily, err := hexToDec(s[2:4] + s[0:2]) // host-order
 	if err != nil {
 		return nil, err
@@ -38,6 +48,10 @@ func parseSockaddr(s string) (map[string]string, error) {
 		out["family"] = "unix"
 		out["path"] = socket
 	case 2: // AF_INET
+		if len(s) < 16 {
+			return nil, errInvalidSockAddrSize
+		}
+
 		port, err := hexToDec(s[4:8])
 		if err != nil {
 			return nil, err
@@ -52,6 +66,10 @@ func parseSockaddr(s string) (map[string]string, error) {
 		out["addr"] = ip
 		out["port"] = strconv.Itoa(int(port))
 	case 10: // AF_INET6
+		if len(s) < 48 {
+			return nil, errInvalidSockAddrSize
+		}
+
 		port, err := hexToDec(s[4:8])
 		if err != nil {
 			return nil, err