diff options
| author | Michael Mann <mmann78@netscape.net> | 2017-05-05 16:49:36 -0400 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2017-05-06 02:33:02 +0000 |
| commit | 247484816619b176ba3d20e7546e37a448eb1961 (patch) | |
| tree | 7003a34cd2dad3c2265ee7f766b18db1a28f2896 /epan | |
| parent | e2bd5314d005d7e94ed0b9e243ba26c4c67b0183 (diff) | |
packet-pcep.c: Fix infinite loop
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1363
Bug: 13687
Change-Id: I11d9736db945857fdcf2c23826a3acf5f6fd08a7
Reviewed-on: https://code.wireshark.org/review/21528
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'epan')
| -rw-r--r-- | epan/dissectors/packet-pcep.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/epan/dissectors/packet-pcep.c b/epan/dissectors/packet-pcep.c index 5ca4dc4007..c04e717489 100644 --- a/epan/dissectors/packet-pcep.c +++ b/epan/dissectors/packet-pcep.c @@ -3108,9 +3108,9 @@ dissect_pcep_obj_overload(proto_tree *pcep_object_tree, packet_info *pinfo, tvbu static void dissect_pcep_obj_unreach_destination(proto_tree *pcep_object_tree, packet_info *pinfo, tvbuff_t *tvb, int offset2, int obj_length, int type) { - guint address_length = 4; + int address_length = 4; - guint body_obj_len = obj_length-OBJ_HDR_LEN; + int body_obj_len = obj_length-OBJ_HDR_LEN; switch (type) { @@ -3122,7 +3122,7 @@ dissect_pcep_obj_unreach_destination(proto_tree *pcep_object_tree, packet_info * break; } - while (body_obj_len) { + while (body_obj_len > 0) { switch (type) { case IPv4: if (body_obj_len < address_length) { |