On Solaris, for 64-bit builds, use the 64-bit pcap-config.

[tcpdump] / print-l2tp.c

diff --git a/print-l2tp.c b/print-l2tp.c
index 8377d3a796329ad3e517b44bc3474f7960613877..024705f821ba5e1e25299bcb169a921f3f6355b4 100644 (file)
--- a/print-l2tp.c
+++ b/print-l2tp.c
@@ -31,6 +31,7 @@
 
 #include "netdissect-stdinc.h"
 
+#define ND_LONGJMP_FROM_TCHECK
 #include "netdissect.h"
 #include "extract.h"
 
@@ -576,13 +577,14 @@ l2tp_avp_print(netdissect_options *ndo, const u_char *dat, u_int length)
        len = GET_BE_U_2(dat) & L2TP_AVP_HDR_LEN_MASK;
 
        /* If it is not long enough to contain the header, we'll give up. */
-       if (len < 6)
-               goto trunc;
+       ND_LCHECKMSG_U(len, 6, "AVP length");
 
        /* If it goes past the end of the remaining length of the packet,
           we'll give up. */
-       if (len > (u_int)length)
-               goto trunc;
+       if (len > length) {
+               ND_PRINT(" (len > %u)", length);
+               goto invalid;
+       }
 
        /* If it goes past the end of the remaining length of the captured
           data, we'll give up. */
@@ -727,8 +729,7 @@ l2tp_avp_print(netdissect_options *ndo, const u_char *dat, u_int length)
 
        return (len);
 
- trunc:
-       nd_print_trunc(ndo);
+invalid:
        return (0);
 }
 
@@ -806,6 +807,8 @@ l2tp_print(netdissect_options *ndo, const u_char *dat, u_int length)
 
        if (flag_o) {   /* Offset Size */
                pad =  GET_BE_U_2(ptr);
+               /* Offset padding octets in packet buffer? */
+               ND_TCHECK_LEN(ptr + 2, pad);
                ptr += (2 + pad);
                cnt += (2 + pad);
        }
@@ -813,18 +816,18 @@ l2tp_print(netdissect_options *ndo, const u_char *dat, u_int length)
        if (flag_l) {
                if (length < l2tp_len) {
                        ND_PRINT(" Length %u larger than packet", l2tp_len);
-                       return;
+                       goto invalid;
                }
                length = l2tp_len;
        }
        if (length < cnt) {
                ND_PRINT(" Length %u smaller than header length", length);
-               return;
+               goto invalid;
        }
        if (flag_t) {
                if (!flag_l) {
                        ND_PRINT(" No length");
-                       return;
+                       goto invalid;
                }
                if (length - cnt == 0) {
                        ND_PRINT(" ZLB");
@@ -837,10 +840,7 @@ l2tp_print(netdissect_options *ndo, const u_char *dat, u_int length)
 
                                avp_length = l2tp_avp_print(ndo, ptr, length - cnt);
                                if (avp_length == 0) {
-                                       /*
-                                        * Truncated.
-                                        */
-                                       break;
+                                       goto invalid;
                                }
                                cnt += avp_length;
                                ptr += avp_length;
@@ -851,4 +851,7 @@ l2tp_print(netdissect_options *ndo, const u_char *dat, u_int length)
                ppp_print(ndo, ptr, length - cnt);
                ND_PRINT("}");
        }
+       return;
+invalid:
+       nd_print_invalid(ndo);
 }