Hacky fix for https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248

Just break out of the loop if offset doesn't go up.

There's almost certainly a better fix - the dissector is weird, and I'm not sure
if all the _length_remaining() checks are important or legacy, and what affect
they have on this issue.

At the very least this will pacify the fuzzbots until somebody has time to
figure it out properly.

svn path=/trunk/; revision=52458

1 files changed, 3 insertions, 0 deletions

diff --git a/epan/dissectors/packet-openwire.c b/epan/dissectors/packet-openwire.c
index b6e77d4652..819955ba50 100644
--- a/epan/dissectors/packet-openwire.c
+++ b/epan/dissectors/packet-openwire.c
@@ -946,6 +946,9 @@ dissect_openwire_type(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int o
                         /* Value */
                         offset += dissect_openwire_type(tvb, pinfo, entry_tree, offset, hf_openwire_none, OPENWIRE_TYPE_NESTED, type, FALSE);
                         proto_item_set_len(map_entry, offset - entryStartOffset);
+                        if (offset - entryStartOffset <= 0) {
+                            break;
+                        }
                     }
                 }
             }