CVE-2017-13049/Rx: add a missing bounds check for Ubik

[tcpdump] / print-rx.c

diff --git a/print-rx.c b/print-rx.c
index ea3a5e67a2f4bc117cf8f3dc6bf3a71d852ebb9e..30528e991684bd97c2237f5e1896498016403f24 100644 (file)
--- a/print-rx.c
+++ b/print-rx.c
@@ -2577,6 +2577,7 @@ ubik_print(netdissect_options *ndo,
                        INTOUT();
                        ND_PRINT((ndo, " length"));
                        INTOUT();
+                       ND_TCHECK_32BITS(bp);
                        temp = EXTRACT_32BITS(bp);
                        bp += sizeof(int32_t);
                        tok2str(ubik_lock_types, "type %d", temp);