Juniper: Fix an undefined behavior at runtime

[tcpdump] / print-juniper.c

diff --git a/print-juniper.c b/print-juniper.c
index 7ee82dc22dd5b0443ee0e7856aff7b0bdcb2eefc..416b2f193eab7341370d8a12a7401e89efb4ef40 100644 (file)
--- a/print-juniper.c
+++ b/print-juniper.c
@@ -1399,6 +1399,11 @@ juniper_parse_header(netdissect_options *ndo,
                        lp->s,
                        l2info->cookie_len);
 
+            if (l2info->cookie_len > 8) {
+                nd_print_invalid(ndo);
+                return 0;
+            }
+
             if (l2info->cookie_len > 0) {
                 ND_TCHECK_LEN(p, l2info->cookie_len);
                 if (ndo->ndo_eflag)