From 77047f4ea45fefb3172f8f35a1338be9f15ff4c4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Mayer?= <jmayer@loplof.de>
Date: Tue, 15 Feb 2011 12:06:39 +0000
Subject: Previously 1 byte TCP payload to port 2000 got interpreted as
 malformed Skinny

svn path=/trunk/; revision=35950
---
 epan/dissectors/packet-skinny.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'epan')

diff --git a/epan/dissectors/packet-skinny.c b/epan/dissectors/packet-skinny.c
index 3667f88864..97f220586a 100644
--- a/epan/dissectors/packet-skinny.c
+++ b/epan/dissectors/packet-skinny.c
@@ -2828,6 +2828,10 @@ dissect_skinny(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
 
   /* check, if this is really an SKINNY packet, they start with a length + 0 */
 
+  if (tvb_length_remaining(tvb, 0) < 8)
+  {
+    return FALSE;
+  }
   /* get relevant header information */
   hdr_data_length = tvb_get_letohl(tvb, 0);
   hdr_version     = tvb_get_letohl(tvb, 4);
-- 
cgit v1.2.3