aboutsummaryrefslogtreecommitdiffstats
path: root/epan
diff options
context:
space:
mode:
authorDario Lombardo <lomato@gmail.com>2018-05-09 17:01:44 +0200
committerPeter Wu <peter@lekensteyn.nl>2018-05-09 20:50:27 +0000
commit957ae1fc48a18d63afcb1d389662fcc41ce90210 (patch)
tree2bcdf53a864542b04a2c16feb7e0136299438995 /epan
parent23e1cde5e7489bf662fd9e8bb2555085b9845871 (diff)
packet-ieee80211: fix infinite loop (CID 1435463).
Change-Id: I1eee5cc0fa87a6add901f4e86b13e1f4564134cd Reviewed-on: https://code.wireshark.org/review/27423 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Diffstat (limited to 'epan')
-rw-r--r--epan/dissectors/packet-ieee80211.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ieee80211.c b/epan/dissectors/packet-ieee80211.c
index 218592809a..9f37fae8a2 100644
--- a/epan/dissectors/packet-ieee80211.c
+++ b/epan/dissectors/packet-ieee80211.c
@@ -9901,7 +9901,8 @@ wnm_notification_req(proto_tree *tree, tvbuff_t *tvb, packet_info *pinfo, int of
len = tvb_reported_length_remaining(tvb, offset);
if (wnm_type == 0) {
- while (len > 0) {
+ int offset_end = offset + len;
+ while (offset < offset_end) {
int start_offset = offset;
proto_tree *wnm_list = NULL;
proto_item *wnm_item = NULL;