diff options
| author | Gerald Combs <gerald@wireshark.org> | 2005-05-02 20:30:56 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2005-05-02 20:30:56 +0000 |
| commit | 949a9da364f4070a3ae9b63c75593665cdeb569a (patch) | |
| tree | 4afb29a7c6db909d44b901108f606a9764e88343 /epan/dissectors/packet-rsvp.c | |
| parent | a105502f35fd1f3fc7b47e603395b7818942fb52 (diff) | |
Break out of an infinite loop. Fixes bug 154.
svn path=/trunk/; revision=14277
Diffstat (limited to 'epan/dissectors/packet-rsvp.c')
| -rw-r--r-- | epan/dissectors/packet-rsvp.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/epan/dissectors/packet-rsvp.c b/epan/dissectors/packet-rsvp.c index 0daf8700cb..3d4358d4a8 100644 --- a/epan/dissectors/packet-rsvp.c +++ b/epan/dissectors/packet-rsvp.c @@ -1970,6 +1970,8 @@ dissect_rsvp_tspec (proto_tree *ti, tvbuff_t *tvb, while (param_len_processed < length) { param_id = tvb_get_guint8(tvb, offset2); param_len = tvb_get_ntohs(tvb, offset2+2) + 1; + if (param_len < 1) + THROW(ReportedBoundsError); switch(param_id) { case 127: /* Token Bucket */ |