CVE-2017-13042/HNCP: add DHCPv6-Data bounds checks

[tcpdump] / tests / TESTLIST

diff --git a/tests/TESTLIST b/tests/TESTLIST
index a8811bc696a5cedb1f76e86625c7fccea2549688..c72f7de6f1ed6ac2bf03acdd857a3c967d5638b2 100644 (file)
--- a/tests/TESTLIST
+++ b/tests/TESTLIST
@@ -554,6 +554,12 @@ radius_attr_asan   radius_attr_asan.pcap           radius_attr_asan.out    -v
 ospf6_decode_v3_asan   ospf6_decode_v3_asan.pcap       ospf6_decode_v3_asan.out -v
 ip_ts_opts_asan                ip_ts_opts_asan.pcap            ip_ts_opts_asan.out     -v
 isakmpv1-attr-oobr     isakmpv1-attr-oobr.pcap         isakmpv1-attr-oobr.out  -v
+# The case below depends on the bug in print-hncp.c, which at the time of
+# discovery had codepoints for DHCPv6-Data and DHCPv4-Data swapped around.
+# After the bugfix the output will be different because of the different
+# code path and will not test the vulnerability unless modified respectively.
+# The .pcap file is truncated after the 1st packet.
+hncp_dhcpv6data-oobr   hncp_dhcpv6data-oobr.pcap       hncp_dhcpv6data-oobr.out -v -c1
 
 # bad packets from Katie Holly
 mlppp-oobr             mlppp-oobr.pcap                 mlppp-oobr.out