CVE-2017-12897/ISO CLNS: Use ND_TTEST() for the bounds checks in isoclns_print().

[tcpdump] / print-ether.c

diff --git a/print-ether.c b/print-ether.c
index 57c07ce935182931692fc98f62a40386159c0b37..33a135e0c373fe8407e1f1511dd9baf2145aae50 100644 (file)
--- a/print-ether.c
+++ b/print-ether.c
@@ -367,7 +367,7 @@ ethertype_print(netdissect_options *ndo,
                        ND_PRINT((ndo, " [|osi]"));
                        return (1);
                }
-               isoclns_print(ndo, p + 1, length - 1, caplen - 1);
+               isoclns_print(ndo, p + 1, length - 1);
                return(1);
 
        case ETHERTYPE_PPPOED: