diff options
| author | Anders Broman <anders.broman@ericsson.com> | 2012-02-23 08:40:23 +0000 |
|---|---|---|
| committer | Anders Broman <anders.broman@ericsson.com> | 2012-02-23 08:40:23 +0000 |
| commit | 2a35f590664a5751dad50226f5c796c5277460de (patch) | |
| tree | 909b505ebcaee3dc425f6ad98d65254392afcc41 /epan/dissectors/packet-h223.c | |
| parent | 228d0e37e7949c4573c2558215bda5ba522aa2a4 (diff) | |
From Jeff Morriss:
H223: Buildbot crash output: fuzz-2012-01-25-22599.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6768
svn path=/trunk/; revision=41148
Diffstat (limited to 'epan/dissectors/packet-h223.c')
| -rw-r--r-- | epan/dissectors/packet-h223.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/epan/dissectors/packet-h223.c b/epan/dissectors/packet-h223.c index c71f6bb6da..5f24bd5240 100644 --- a/epan/dissectors/packet-h223.c +++ b/epan/dissectors/packet-h223.c @@ -825,14 +825,14 @@ dissect_mux_sdu_fragment(tvbuff_t *volatile next_tvb, packet_info *pinfo, static guint32 mux_element_sublist_size( h223_mux_element* me ) { - h223_mux_element *current_me = me; + h223_mux_element *current_me = me->next; guint32 length = 0; while ( current_me ) { - current_me = current_me->next; if ( current_me->sublist ) length += current_me->repeat_count * mux_element_sublist_size( current_me->sublist ); else length += current_me->repeat_count; + current_me = current_me->next; } if ( length == 0 ) { /* should never happen, but to avoid infinite loops... */ DISSECTOR_ASSERT_NOT_REACHED(); |