(for 4.9.3) CVE-2018-14470/Babel: fix an existing length check

[tcpdump] / print-vtp.c

diff --git a/print-vtp.c b/print-vtp.c
index d153cc19a5fd25d1bf8d773266c24ca18d775a4c..d69c4093e9779890a47c9aac640d3beeddb4f50f 100644 (file)
--- a/print-vtp.c
+++ b/print-vtp.c
@@ -241,7 +241,7 @@ vtp_print (netdissect_options *ndo,
         */
 
        tptr += 4;
-       while (tptr < (pptr+length)) {
+       while ((unsigned)(tptr - pptr) < length) {
 
            ND_TCHECK_8BITS(tptr);
            len = *tptr;