From bfd1461ec81311f31e9fc0f3f298ae779911c7f4 Mon Sep 17 00:00:00 2001 From: Peter Wu Date: Tue, 25 Apr 2017 12:13:01 +0200 Subject: ieee80211: fix stack-use-after-return Bug: 13662 Change-Id: I26c53ecc78005b26908d74877814be22924848bc Fixes: v1.11.3-rc1-2029-g4b8b83407a ("Support for IEEE 802.11ad") Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1268 Reviewed-on: https://code.wireshark.org/review/21333 Petri-Dish: Peter Wu Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu --- epan/dissectors/packet-ieee80211.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'epan') diff --git a/epan/dissectors/packet-ieee80211.c b/epan/dissectors/packet-ieee80211.c index 5347845f02..1c14c81cc0 100644 --- a/epan/dissectors/packet-ieee80211.c +++ b/epan/dissectors/packet-ieee80211.c @@ -14336,9 +14336,8 @@ add_tagged_field(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int offset ieee80211_tagged_field_data_t field_data; gboolean isDMG; - gboolean *p_isDMG = ((gboolean*)(p_get_proto_data(wmem_file_scope(), pinfo, proto_wlan, IS_DMG_KEY))); + isDMG = GPOINTER_TO_INT(p_get_proto_data(wmem_file_scope(), pinfo, proto_wlan, IS_DMG_KEY)); - isDMG = p_isDMG ? *p_isDMG : FALSE; tag_no = tvb_get_guint8(tvb, offset); tag_len = tvb_get_guint8(tvb, offset + 1); @@ -17169,7 +17168,7 @@ dissect_ieee80211_common(tvbuff_t *tvb, packet_info *pinfo, AIRPDCAP_KEY_ITEM used_key; - p_add_proto_data(wmem_file_scope(), pinfo, proto_wlan, IS_DMG_KEY, &isDMG); + p_add_proto_data(wmem_file_scope(), pinfo, proto_wlan, IS_DMG_KEY, GINT_TO_POINTER(isDMG)); whdr= &whdrs[0]; -- cgit v1.2.3