CVE-2016-7931/Add bounds and length checks.

[tcpdump] / print-ip.c

diff --git a/print-ip.c b/print-ip.c
index f96ba55973ea32b58905ce69784a1578e89ce23a..cbcdab853ac5e3d3e701eb55a10d65835b363fc4 100644 (file)
--- a/print-ip.c
+++ b/print-ip.c
@@ -330,6 +330,10 @@ again:
        switch (ipds->nh) {
 
        case IPPROTO_AH:
+               if (!ND_TTEST(*ipds->cp)) {
+                       ND_PRINT((ndo, "[|AH]"));
+                       break;
+               }
                ipds->nh = *ipds->cp;
                ipds->advance = ah_print(ndo, ipds->cp);
                if (ipds->advance <= 0)