diff options
| author | Pascal Quantin <pascal.quantin@gmail.com> | 2015-10-24 11:32:16 +0200 |
|---|---|---|
| committer | Pascal Quantin <pascal.quantin@gmail.com> | 2015-10-25 12:11:38 +0000 |
| commit | 2ddd92b6f8f587325b9e14598658626f3a007c5c (patch) | |
| tree | 76b08cbcd7b63c9ed45bfeb3190e7a983ee4c912 | |
| parent | cc77d6c66f0c0c32bda005bacbac686a158b95d0 (diff) | |
SDP: protect against out of bounds access
Change-Id: I4b24441cb26757b639e8113cab18d64c7f07112f
Ping-Bug: 9887
Reviewed-on: https://code.wireshark.org/review/11241
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
| -rw-r--r-- | epan/dissectors/packet-sdp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-sdp.c b/epan/dissectors/packet-sdp.c index 8740f07500..42a820ccdf 100644 --- a/epan/dissectors/packet-sdp.c +++ b/epan/dissectors/packet-sdp.c @@ -2627,7 +2627,7 @@ dissect_sdp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) /* Free the remainded hash tables not used */ /* XXX - more placeholder functionality */ if (transport_info == &local_transport_info) { - for (n = transport_info->media_count; n < SDP_MAX_RTP_CHANNELS; n++) + for (n = MAX(transport_info->media_count, 0); n < SDP_MAX_RTP_CHANNELS; n++) { if (!transport_info->media[n].set_rtp) { |