diff options
| author | Balint Reczey <balint@balintreczey.hu> | 2013-01-24 09:34:54 +0000 |
|---|---|---|
| committer | Balint Reczey <balint@balintreczey.hu> | 2013-01-24 09:34:54 +0000 |
| commit | 335d6ca7e29587103720a22f32dbd13b6b30c807 (patch) | |
| tree | 9c05e315c91fb1f781efe86c8ea4de33e94822bb /epan/dissectors/packet-ntlmssp.c | |
| parent | 42de9da8e3dafae85a7022f38f032a59b5bb77b4 (diff) | |
Prevent copying longer than expected NTLM SSP key
svn path=/trunk/; revision=47248
Diffstat (limited to 'epan/dissectors/packet-ntlmssp.c')
| -rw-r--r-- | epan/dissectors/packet-ntlmssp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ntlmssp.c b/epan/dissectors/packet-ntlmssp.c index cdfb765b63..2b37091fb4 100644 --- a/epan/dissectors/packet-ntlmssp.c +++ b/epan/dissectors/packet-ntlmssp.c @@ -2291,7 +2291,7 @@ decrypt_verifier(tvbuff_t *tvb, int offset, guint32 encrypted_block_length, /* Setup the buffer to decrypt to */ tvb_memcpy(tvb, packet_ntlmssp_info->verifier, - offset, encrypted_block_length); + offset, MIN(encrypted_block_length, sizeof(packet_ntlmssp_info->verifier))); /*if (!(NTLMSSP_NEGOTIATE_KEY_EXCH & packet_ntlmssp_info->flags)) {*/ if (conv_ntlmssp_info->flags & NTLMSSP_NEGOTIATE_EXTENDED_SECURITY) { |