From cf7474a92e820ca3e9d704bc5df465a45a1e9603 Mon Sep 17 00:00:00 2001
From: Gerald Combs <gerald@wireshark.org>
Date: Sun, 16 Oct 2005 14:23:56 +0000
Subject: Fix up a length check.

svn path=/trunk/; revision=16245
---
 epan/dissectors/packet-rpc.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'epan/dissectors/packet-rpc.c')

diff --git a/epan/dissectors/packet-rpc.c b/epan/dissectors/packet-rpc.c
index 3b7bde3a39..d83ec912a2 100644
--- a/epan/dissectors/packet-rpc.c
+++ b/epan/dissectors/packet-rpc.c
@@ -2416,6 +2416,8 @@ dissect_rpc_message(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
 
 	/* now we know, that RPC was shorter */
 	if (rpc_item) {
+		if (offset < 0)
+			THROW(ReportedBoundsError);
 		tvb_ensure_bytes_exist(tvb, offset, 0);
 		proto_item_set_end(rpc_item, tvb, offset);
 	}
-- 
cgit v1.2.3