Handle very large -f files by rejecting them.

[tcpdump] / print-vrrp.c

diff --git a/print-vrrp.c b/print-vrrp.c
index d6114e57b14a83d0ef30bc107adf6a54629c698c..a39766767e40d7a054cae8f3d2c96789172ed317 100644 (file)
--- a/print-vrrp.c
+++ b/print-vrrp.c
@@ -152,9 +152,11 @@ vrrp_print(netdissect_options *ndo,
                if (version == 3 && ND_TTEST2(bp[0], len)) {
                        uint16_t cksum = nextproto4_cksum(ndo, (const struct ip *)bp2, bp,
                                len, len, IPPROTO_VRRP);
-                       if (cksum)
+                       if (cksum) {
+                               ND_TCHECK_16BITS(&bp[6]);
                                ND_PRINT((ndo, ", (bad vrrp cksum %x)",
                                        EXTRACT_16BITS(&bp[6])));
+                       }
                }
 
                ND_PRINT((ndo, ", addrs"));