NULL/LOOP: Add a bounds check

[tcpdump] / print-null.c

diff --git a/print-null.c b/print-null.c
index f0ad66177232e7f94a6421a8ef1a0c7125928f46..f1067ff5ca1d673560b0a7aad96b0026f786e125 100644 (file)
--- a/print-null.c
+++ b/print-null.c
@@ -19,18 +19,22 @@
  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
  */
 
-#define NETDISSECT_REWORKED
+/* \summary: BSD loopback device printer */
+
 #ifdef HAVE_CONFIG_H
-#include "config.h"
+#include <config.h>
 #endif
 
-#include <tcpdump-stdinc.h>
+#include "netdissect-stdinc.h"
 
 #include <string.h>
 
-#include "interface.h"
+#include "netdissect.h"
+#include "extract.h"
 #include "af.h"
 
+static const char tstr[] = " [|null]";
+
 /*
  * The DLT_NULL packet header is 4 bytes long. It contains a host-byte-order
  * 32-bit integer that specifies the family, e.g. AF_INET.
@@ -51,18 +55,18 @@
 #define        SWAPLONG(y) \
 ((((y)&0xff)<<24) | (((y)&0xff00)<<8) | (((y)&0xff0000)>>8) | (((y)>>24)&0xff))
 
-static inline void
+static void
 null_hdr_print(netdissect_options *ndo, u_int family, u_int length)
 {
        if (!ndo->ndo_qflag) {
-               ND_PRINT((ndo, "AF %s (%u)",
-                       tok2str(bsd_af_values,"Unknown",family),family));
+               ND_PRINT("AF %s (%u)",
+                       tok2str(bsd_af_values,"Unknown",family),family);
        } else {
-               ND_PRINT((ndo, "%s",
-                       tok2str(bsd_af_values,"Unknown AF %u",family)));
+               ND_PRINT("%s",
+                       tok2str(bsd_af_values,"Unknown AF %u",family));
        }
 
-       ND_PRINT((ndo, ", length %u: ", length));
+       ND_PRINT(", length %u: ", length);
 }
 
 /*
@@ -76,14 +80,13 @@ null_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char
 {
        u_int length = h->len;
        u_int caplen = h->caplen;
-       u_int family;
+       uint32_t family;
 
-       if (caplen < NULL_HDRLEN) {
-               ND_PRINT((ndo, "[|null]"));
-               return (NULL_HDRLEN);
-       }
+       if (caplen < NULL_HDRLEN)
+               goto trunc;
 
-       memcpy((char *)&family, (char *)p, sizeof(family));
+       ND_TCHECK_4(p);
+       memcpy((char *)&family, (const char *)p, sizeof(family));
 
        /*
         * This isn't necessarily in our host byte order; if this is
@@ -109,20 +112,18 @@ null_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char
                ip_print(ndo, p, length);
                break;
 
-#ifdef INET6
        case BSD_AFNUM_INET6_BSD:
        case BSD_AFNUM_INET6_FREEBSD:
        case BSD_AFNUM_INET6_DARWIN:
                ip6_print(ndo, p, length);
                break;
-#endif
 
        case BSD_AFNUM_ISO:
-               isoclns_print(p, length, caplen);
+               isoclns_print(ndo, p, length);
                break;
 
        case BSD_AFNUM_APPLETALK:
-               atalk_print(p, length);
+               atalk_print(ndo, p, length);
                break;
 
        case BSD_AFNUM_IPX:
@@ -137,6 +138,9 @@ null_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char
                        ND_DEFAULTPRINT(p, caplen);
        }
 
+       return (NULL_HDRLEN);
+trunc:
+       ND_PRINT("%s", tstr);
        return (NULL_HDRLEN);
 }