diff options
| author | Gerald Combs <gerald@wireshark.org> | 2005-04-30 16:42:04 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2005-04-30 16:42:04 +0000 |
| commit | a416a4b6f573497c891c23b044777f0b95cb5873 (patch) | |
| tree | f740b03761b75470a3990aafcd5564e7a30efbf3 | |
| parent | 75438b269f34cbf4cf7241968d8b1b7643ca98d0 (diff) | |
Check for an integer overflow. Fixes bug 149.
svn path=/trunk/; revision=14245
| -rw-r--r-- | epan/dissectors/packet-ndps.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/epan/dissectors/packet-ndps.c b/epan/dissectors/packet-ndps.c index 974e2a82f5..65992badc3 100644 --- a/epan/dissectors/packet-ndps.c +++ b/epan/dissectors/packet-ndps.c @@ -3185,6 +3185,8 @@ attribute_value(tvbuff_t* tvb, proto_tree *ndps_tree, int foffset) } foffset += length; foffset += (length%2); + if ((int) foffset <= 0) + THROW(ReportedBoundsError); proto_item_set_end(aitem, tvb, foffset); } break; |