diff options
-rw-r--r-- | epan/dissectors/packet-ltp.c | 3 | ||||
-rw-r--r-- | epan/emem.c | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/epan/dissectors/packet-ltp.c b/epan/dissectors/packet-ltp.c index 2de285c810..c6aed4737b 100644 --- a/epan/dissectors/packet-ltp.c +++ b/epan/dissectors/packet-ltp.c @@ -322,6 +322,9 @@ dissect_report_segment(proto_tree *ltp_tree, tvbuff_t *tvb,int frame_offset){ } rcpt_clm_cnt = evaluate_sdnv(tvb,frame_offset + segment_offset, &rcpt_clm_cnt_size); + if (rcpt_clm_cnt < 0){ + return 0; + } segment_offset += rcpt_clm_cnt_size; if((unsigned)(frame_offset + segment_offset) > tvb_length(tvb)){ return 0; diff --git a/epan/emem.c b/epan/emem.c index 1364610c87..85a94adf1d 100644 --- a/epan/emem.c +++ b/epan/emem.c @@ -723,7 +723,7 @@ emem_alloc_chunk(size_t size, emem_header_t *mem) #endif /* make sure we dont try to allocate too much (arbitrary limit) */ - DISSECTOR_ASSERT(asize<(EMEM_PACKET_CHUNK_SIZE>>2)); + DISSECTOR_ASSERT(size<(EMEM_PACKET_CHUNK_SIZE>>2)); if (!mem->free_list) emem_create_chunk(&mem->free_list, use_canary); |