CVE-2016-7975/Fix another bounds check.

[tcpdump] / print-tcp.c

diff --git a/print-tcp.c b/print-tcp.c
index a1c1dde7575f715a1da0258d335874ba42172a4e..3a89e8d3cb77253c3343fc6ee9bf54c8bdcf0ef5 100644 (file)
--- a/print-tcp.c
+++ b/print-tcp.c
@@ -541,7 +541,7 @@ tcp_print(netdissect_options *ndo,
                                 ND_PRINT((ndo, " keyid %d", *cp++));
                                 datalen = len - 3;
                                 for (i = 0; i < datalen; ++i) {
-                                        LENCHECK(i);
+                                        LENCHECK(i + 1);
                                         ND_PRINT((ndo, "%02x", cp[i]));
                                 }
                                 break;