UDP: Add a bounds check

[tcpdump] / print-udp.c

diff --git a/print-udp.c b/print-udp.c
index 47838307f4c57a9fb060e33716d7722e50214f5b..ddc35157b0bb22a9d926ba6edd56a3302062536d 100644 (file)
--- a/print-udp.c
+++ b/print-udp.c
@@ -451,6 +451,7 @@ udp_print(netdissect_options *ndo, const u_char *bp, u_int length,
 
                case PT_RPC:
                        rp = (const struct sunrpc_msg *)(up + 1);
+                       ND_TCHECK_4(rp->rm_direction);
                        direction = (enum sunrpc_msg_type) EXTRACT_BE_U_4(rp->rm_direction);
                        if (direction == SUNRPC_CALL)
                                sunrpc_print(ndo, (const u_char *)rp, length,