From a416a4b6f573497c891c23b044777f0b95cb5873 Mon Sep 17 00:00:00 2001
From: Gerald Combs <gerald@wireshark.org>
Date: Sat, 30 Apr 2005 16:42:04 +0000
Subject: Check for an integer overflow.  Fixes bug 149.

svn path=/trunk/; revision=14245
---
 epan/dissectors/packet-ndps.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/epan/dissectors/packet-ndps.c b/epan/dissectors/packet-ndps.c
index 974e2a82f5..65992badc3 100644
--- a/epan/dissectors/packet-ndps.c
+++ b/epan/dissectors/packet-ndps.c
@@ -3185,6 +3185,8 @@ attribute_value(tvbuff_t* tvb, proto_tree *ndps_tree, int foffset)
                 }
                 foffset += length;
                 foffset += (length%2);
+                if ((int) foffset <= 0)
+                    THROW(ReportedBoundsError);
                 proto_item_set_end(aitem, tvb, foffset);
             }
             break;
-- 
cgit v1.2.3