diff options
author | Dario Lombardo <lomato@gmail.com> | 2018-05-09 17:01:44 +0200 |
---|---|---|
committer | Peter Wu <peter@lekensteyn.nl> | 2018-05-09 20:50:27 +0000 |
commit | 957ae1fc48a18d63afcb1d389662fcc41ce90210 (patch) | |
tree | 2bcdf53a864542b04a2c16feb7e0136299438995 /epan | |
parent | 23e1cde5e7489bf662fd9e8bb2555085b9845871 (diff) |
packet-ieee80211: fix infinite loop (CID 1435463).
Change-Id: I1eee5cc0fa87a6add901f4e86b13e1f4564134cd
Reviewed-on: https://code.wireshark.org/review/27423
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Diffstat (limited to 'epan')
-rw-r--r-- | epan/dissectors/packet-ieee80211.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ieee80211.c b/epan/dissectors/packet-ieee80211.c index 218592809a..9f37fae8a2 100644 --- a/epan/dissectors/packet-ieee80211.c +++ b/epan/dissectors/packet-ieee80211.c @@ -9901,7 +9901,8 @@ wnm_notification_req(proto_tree *tree, tvbuff_t *tvb, packet_info *pinfo, int of len = tvb_reported_length_remaining(tvb, offset); if (wnm_type == 0) { - while (len > 0) { + int offset_end = offset + len; + while (offset < offset_end) { int start_offset = offset; proto_tree *wnm_list = NULL; proto_item *wnm_item = NULL; |