diff options
author | Guy Harris <guy@alum.mit.edu> | 2011-11-13 01:38:46 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2011-11-13 01:38:46 +0000 |
commit | 833908d49b39a392fd8a4ca3ba469819b968424e (patch) | |
tree | 43dfae7fbad460fdb24a4de326a559c942792aac /epan/dissectors/packet-ua.c | |
parent | f5d4a4c7bae60ee071c4e3c6de535df3a9c961b9 (diff) |
The sum of a guint16 and 2 does not necessarily fit in a guint16. Put
it into a gint, instead. This should fix bug 6572, by preventing an
infinite loop if the sum in question is 0 modulo 2^16.
svn path=/trunk/; revision=39817
Diffstat (limited to 'epan/dissectors/packet-ua.c')
-rw-r--r-- | epan/dissectors/packet-ua.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ua.c b/epan/dissectors/packet-ua.c index cd9f813c93..b5921d16a6 100644 --- a/epan/dissectors/packet-ua.c +++ b/epan/dissectors/packet-ua.c @@ -277,7 +277,7 @@ static const value_string szTlvProperty[] = gboolean is_ua(tvbuff_t *tvb) { gint nLen, iOffs; - guint16 nNoeLen; + gint nNoeLen; nLen = tvb_length(tvb); for(iOffs = 0; iOffs < nLen; ) |