diff options
| author | Jeff Morriss <jeff.morriss.ws@gmail.com> | 2018-11-09 15:16:35 -0500 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2018-11-10 07:43:04 +0000 |
| commit | 1ddaf1a0944ffe95d69717ac9fdc60824932f676 (patch) | |
| tree | e3d5a3fa55fd0a5c8d9684539d660ea22289abd0 /extcap/ssh-base.c | |
| parent | b0582230f339ac98b05527544e8c6c6668bf2566 (diff) | |
MMSE: catch length overflows to avoid infinite loop.
After fetching a length from the packet ensure those bytes exist to
avoid integer overflows by callers (while avoiding having to ensure
every caller checks for overflows).
Also add a check to ensure the loop in question is progressing through
the TVB; report a dissector bug if it doesn't.
Bug: 15250
Change-Id: I9434bfe9d530942fd45342690383df2decacdba1
Reviewed-on: https://code.wireshark.org/review/30560
Petri-Dish: Jeff Morriss <jeff.morriss.ws@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'extcap/ssh-base.c')
0 files changed, 0 insertions, 0 deletions