X-Git-Url: https://git.tcpdump.org/tcpdump/blobdiff_plain/61d5da84a02a24cafa3bcc6502293bb3d3e0e1c2..refs/heads/master:/print-eap.c

diff --git a/print-eap.c b/print-eap.c
index e640e83d..174f9c94 100644
--- a/print-eap.c
+++ b/print-eap.c
@@ -20,12 +20,11 @@
 
 /* \summary: Extensible Authentication Protocol (EAP) printer */
 
-#ifdef HAVE_CONFIG_H
 #include <config.h>
-#endif
 
 #include "netdissect-stdinc.h"
 
+#define ND_LONGJMP_FROM_TCHECK
 #include "netdissect.h"
 #include "extract.h"
 
@@ -149,7 +148,7 @@ static const struct tok eap_aka_subtype_values[] = {
 void
 eap_print(netdissect_options *ndo,
           const u_char *cp,
-          u_int length)
+          const u_int length)
 {
     u_int type, subtype, len;
     u_int count;
@@ -158,6 +157,7 @@ eap_print(netdissect_options *ndo,
     ndo->ndo_protocol = "eap";
     type = GET_U_1(cp);
     len = GET_BE_U_2(cp + 2);
+    ND_ICHECK_U(len, <, 4);
     if (len != length) {
         /*
          * Probably a fragment; in some cases the fragmentation might
@@ -173,19 +173,12 @@ eap_print(netdissect_options *ndo,
             type,
             GET_U_1((cp + 1)),
             len);
-    if (len < 4) {
-        ND_PRINT(" (too short for EAP header)");
-        return;
-    }
 
     ND_TCHECK_LEN(cp, len);
 
     if (type == EAP_REQUEST || type == EAP_RESPONSE) {
         /* RFC 3748 Section 4.1 */
-        if (len < 5) {
-            ND_PRINT(" (too short for EAP request/response)");
-            return;
-        }
+        ND_ICHECK_U(len, <, 5);
         subtype = GET_U_1(cp + 4);
         ND_PRINT("\n\t\t Type %s (%u)",
                 tok2str(eap_type_values, "unknown", subtype),
@@ -202,10 +195,7 @@ eap_print(netdissect_options *ndo,
 
             case EAP_TYPE_NOTIFICATION:
                 /* According to RFC 3748, there must be at least one octet of message */
-                if (len < 6) {
-                    ND_PRINT(" (too short for EAP Notification request/response)");
-                    return;
-                }
+                ND_ICHECK_U(len, <, 6);
                 ND_PRINT(", Notification: ");
                 nd_printjnp(ndo, cp + 5, len - 5);
                 break;
@@ -216,10 +206,7 @@ eap_print(netdissect_options *ndo,
                  * the desired authentication
                  * type one octet per type
                  */
-                if (len < 6) {
-                    ND_PRINT(" (too short for EAP Legacy NAK request/response)");
-                    return;
-                }
+                ND_ICHECK_U(len, <, 6);
                 sep = "";
                 for (count = 5; count < len; count++) {
                     ND_PRINT("%s %s (%u)", sep,
@@ -231,10 +218,7 @@ eap_print(netdissect_options *ndo,
 
             case EAP_TYPE_TTLS:
             case EAP_TYPE_TLS:
-                if (len < 6) {
-                    ND_PRINT(" (too short for EAP TLS/TTLS request/response)");
-                    return;
-                }
+                ND_ICHECK_U(len, <, 6);
                 if (subtype == EAP_TYPE_TTLS)
                     ND_PRINT(" TTLSv%u",
                            EAP_TTLS_VERSION(GET_U_1((cp + 5))));
@@ -243,19 +227,13 @@ eap_print(netdissect_options *ndo,
                        GET_U_1(cp + 5));
 
                 if (EAP_TLS_EXTRACT_BIT_L(GET_U_1(cp + 5))) {
-                    if (len < 10) {
-                        ND_PRINT(" (too short for EAP TLS/TTLS request/response with length)");
-                        return;
-                    }
+                    ND_ICHECK_U(len, <, 10);
                     ND_PRINT(", len %u", GET_BE_U_4(cp + 6));
                 }
                 break;
 
             case EAP_TYPE_FAST:
-                if (len < 6) {
-                    ND_PRINT(" (too short for EAP FAST request/response)");
-                    return;
-                }
+                ND_ICHECK_U(len, <, 6);
                 ND_PRINT(" FASTv%u",
                        EAP_TTLS_VERSION(GET_U_1((cp + 5))));
                 ND_PRINT(" flags [%s] 0x%02x",
@@ -263,10 +241,7 @@ eap_print(netdissect_options *ndo,
                        GET_U_1(cp + 5));
 
                 if (EAP_TLS_EXTRACT_BIT_L(GET_U_1(cp + 5))) {
-                    if (len < 10) {
-                        ND_PRINT(" (too short for EAP FAST request/response with length)");
-                        return;
-                    }
+                    ND_ICHECK_U(len, <, 10);
                     ND_PRINT(", len %u", GET_BE_U_4(cp + 6));
                 }
 
@@ -275,10 +250,7 @@ eap_print(netdissect_options *ndo,
 
             case EAP_TYPE_AKA:
             case EAP_TYPE_SIM:
-                if (len < 6) {
-                    ND_PRINT(" (too short for EAP SIM/AKA request/response)");
-                    return;
-                }
+                ND_ICHECK_U(len, <, 6);
                 ND_PRINT(" subtype [%s] 0x%02x",
                        tok2str(eap_aka_subtype_values, "unknown", GET_U_1((cp + 5))),
                        GET_U_1(cp + 5));
@@ -296,8 +268,9 @@ eap_print(netdissect_options *ndo,
         }
     }
     return;
-trunc:
-    nd_print_trunc(ndo);
+
+invalid:
+    nd_print_invalid(ndo);
 }
 
 void
@@ -309,7 +282,6 @@ eapol_print(netdissect_options *ndo,
 
     ndo->ndo_protocol = "eap";
     eap = (const struct eap_frame_t *)cp;
-    ND_TCHECK_SIZE(eap);
     eap_type = GET_U_1(eap->type);
 
     ND_PRINT("%s (%u) v%u, len %u",
@@ -326,10 +298,10 @@ eapol_print(netdissect_options *ndo,
     switch (eap_type) {
     case EAP_FRAME_TYPE_PACKET:
         if (eap_len == 0)
-            goto trunc;
+            goto invalid;
         ND_PRINT(", ");
         eap_print(ndo, cp, eap_len);
-        return;
+        break;
     case EAP_FRAME_TYPE_LOGOFF:
     case EAP_FRAME_TYPE_ENCAP_ASF_ALERT:
     default:
@@ -337,6 +309,6 @@ eapol_print(netdissect_options *ndo,
     }
     return;
 
- trunc:
-    nd_print_trunc(ndo);
+invalid:
+    nd_print_invalid(ndo);
 }