diff options
| author | Alexis La Goutte <alexis.lagoutte@gmail.com> | 2015-02-14 12:47:38 +0100 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2015-02-14 16:36:49 +0000 |
| commit | 847f59096304a7aeebf7e9c498986cb05b960540 (patch) | |
| tree | 560233c895d1effe29f08985719980e235ba6d08 | |
| parent | 91b5042ece248e4773d207b4144bd866f8150fa4 (diff) | |
MIP6: AUTH mobility option parses Mobility SPI and Authentication Data incorrectly
The authentication data in the AUTH option in attached IPv6 packet contains one byte too much. This byte is read beyond the option data.
In Wireshark, clicking on the AUTH shows that the option ends at 0xCE while clicking on the Authentication Data shows that it ends at 0xCF.
Reported by Boaz
Bug:10626
Change-Id: I0bcfd6331bc1de30f25d16590487c0e3bf5c002f
Reviewed-on: https://code.wireshark.org/review/7112
Reviewed-by: Michael Mann <mmann78@netscape.net>
| -rw-r--r-- | epan/dissectors/packet-mip6.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-mip6.c b/epan/dissectors/packet-mip6.c index e87fe077c7..dcc3dc7628 100644 --- a/epan/dissectors/packet-mip6.c +++ b/epan/dissectors/packet-mip6.c @@ -2048,7 +2048,7 @@ dissect_mip6_opt_auth(const mip6_opt *optp _U_, tvbuff_t *tvb, int offset, offset++; proto_tree_add_item(opt_tree, hf_mip6_opt_auth_mobility_spi, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; - proto_tree_add_item(opt_tree, hf_mip6_opt_auth_auth_data, tvb, offset, optlen-4-2, ENC_NA); + proto_tree_add_item(opt_tree, hf_mip6_opt_auth_auth_data, tvb, offset, optlen-4-3, ENC_NA); } |