Handle very large -f files by rejecting them.

[tcpdump] / print-cip.c

diff --git a/print-cip.c b/print-cip.c
index fde5ab44512f59170a0d082da70413ed03a7096d..a123b69f51bf4f619ce9b04dab8924cbe699069d 100644 (file)
--- a/print-cip.c
+++ b/print-cip.c
@@ -20,19 +20,19 @@
  *
  */
 
+/* \summary: Classical-IP over ATM printer */
+
 #ifdef HAVE_CONFIG_H
 #include "config.h"
 #endif
 
 #include <string.h>
 
-#include <tcpdump-stdinc.h>
+#include <netdissect-stdinc.h>
 
-#include "interface.h"
+#include "netdissect.h"
 #include "addrtoname.h"
 
-#define RFC1483LLC_LEN 8
-
 static const unsigned char rfcllc[] = {
        0xaa,   /* DSAP: non-ISO */
        0xaa,   /* SSAP: non-ISO */
@@ -42,12 +42,12 @@ static const unsigned char rfcllc[] = {
        0x00 };
 
 static inline void
-cip_print(netdissect_options *ndo, int length)
+cip_print(netdissect_options *ndo, u_int length)
 {
        /*
         * There is no MAC-layer header, so just print the length.
         */
-       ND_PRINT((ndo, "%d: ", length));
+       ND_PRINT((ndo, "%u: ", length));
 }
 
 /*
@@ -61,17 +61,23 @@ cip_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char
 {
        u_int caplen = h->caplen;
        u_int length = h->len;
+       size_t cmplen;
        int llc_hdrlen;
 
-       if (memcmp(rfcllc, p, sizeof(rfcllc))==0 && caplen < RFC1483LLC_LEN) {
-               ND_PRINT((ndo, "[|cip]"));
-               return (0);
-       }
+       cmplen = sizeof(rfcllc);
+       if (cmplen > caplen)
+               cmplen = caplen;
+       if (cmplen > length)
+               cmplen = length;
 
        if (ndo->ndo_eflag)
                cip_print(ndo, length);
 
-       if (memcmp(rfcllc, p, sizeof(rfcllc)) == 0) {
+       if (cmplen == 0) {
+               ND_PRINT((ndo, "[|cip]"));
+               return 0;
+       }
+       if (memcmp(rfcllc, p, cmplen) == 0) {
                /*
                 * LLC header is present.  Try to print it & higher layers.
                 */