CVE-2017-13031/Check for the presence of the entire IPv6 fragment header.

[tcpdump] / print-juniper.c

diff --git a/print-juniper.c b/print-juniper.c
index e8879ea7b6b58bfcc8ce1439bc8f03cfd458c046..ff1de9c03d15bf9edf72b93ba2c356e4754b3262 100644 (file)
--- a/print-juniper.c
+++ b/print-juniper.c
@@ -1367,6 +1367,7 @@ juniper_parse_header(netdissect_options *ndo,
             if (ndo->ndo_eflag) ND_PRINT((ndo, ": ")); /* print demarc b/w L2/L3*/
 
 
+            ND_TCHECK_16BITS(p+l2info->cookie_len);
             l2info->proto = EXTRACT_16BITS(p+l2info->cookie_len);
             break;
         }