diff options
author | Peter Wu <peter@lekensteyn.nl> | 2016-02-20 16:02:54 +0100 |
---|---|---|
committer | Peter Wu <peter@lekensteyn.nl> | 2016-02-20 15:18:08 +0000 |
commit | 3b644a75c9530b8fc60e2fa964dfb2ae327e240d (patch) | |
tree | 4f4894c15139619ae2fdfc51de31bd660ec37f69 /epan/dissectors/packet-q2931.c | |
parent | 55b5b7caf3ec4856838b0416d5a91d3a3ff67ec8 (diff) |
Fix various off-by-one in buffer sizes
Some only allow buffer overruns (read), others also buffer overflows
(write).
Found by looking for '\[ *N *\]' where N is 255, 0xff, 15 and 0xf (case
insensitive).
Change-Id: I250687e2fdeb8fbd5eaf0bbb8251c3dab9640760
Reviewed-on: https://code.wireshark.org/review/14034
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Diffstat (limited to 'epan/dissectors/packet-q2931.c')
-rw-r--r-- | epan/dissectors/packet-q2931.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-q2931.c b/epan/dissectors/packet-q2931.c index d8f5812363..c5b5bfb1a1 100644 --- a/epan/dissectors/packet-q2931.c +++ b/epan/dissectors/packet-q2931.c @@ -1873,7 +1873,7 @@ dissect_q2931(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U proto_tree *q2931_tree = NULL; proto_item *ti; guint8 call_ref_len; - guint8 call_ref[15]; + guint8 call_ref[16]; guint8 message_type; guint8 message_type_ext; guint16 message_len; |