aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-ua.c
diff options
context:
space:
mode:
authorGuy Harris <guy@alum.mit.edu>2011-11-13 01:38:46 +0000
committerGuy Harris <guy@alum.mit.edu>2011-11-13 01:38:46 +0000
commit833908d49b39a392fd8a4ca3ba469819b968424e (patch)
tree43dfae7fbad460fdb24a4de326a559c942792aac /epan/dissectors/packet-ua.c
parentf5d4a4c7bae60ee071c4e3c6de535df3a9c961b9 (diff)
The sum of a guint16 and 2 does not necessarily fit in a guint16. Put
it into a gint, instead. This should fix bug 6572, by preventing an infinite loop if the sum in question is 0 modulo 2^16. svn path=/trunk/; revision=39817
Diffstat (limited to 'epan/dissectors/packet-ua.c')
-rw-r--r--epan/dissectors/packet-ua.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ua.c b/epan/dissectors/packet-ua.c
index cd9f813c93..b5921d16a6 100644
--- a/epan/dissectors/packet-ua.c
+++ b/epan/dissectors/packet-ua.c
@@ -277,7 +277,7 @@ static const value_string szTlvProperty[] =
gboolean is_ua(tvbuff_t *tvb)
{
gint nLen, iOffs;
- guint16 nNoeLen;
+ gint nNoeLen;
nLen = tvb_length(tvb);
for(iOffs = 0; iOffs < nLen; )