]> The Tcpdump Group git mirrors - tcpdump/commit
projects / tcpdump / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 8fb9f54) | patch
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced by previous fix.
authorGuy Harris <[email protected]>
Tue, 21 Feb 2017 21:40:19 +0000 (13:40 -0800)
committerDenis Ovsienko <[email protected]>
Sun, 3 Sep 2017 23:08:58 +0000 (00:08 +0100)
commit1ffd7948358ad5024e4f2a4e5ce19e475136ba78
treea9b92e330cc98f4988b8e4268ff06334cd548161tree
parent8fb9f546323a814970cc9b3e40b4ae76c6216cf0commit | diff
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced by previous fix.

We've already advanced the pointer past the PAN ID, if present; it now
points to the address, so don't add 2 to it.

This fixes a buffer over-read discovered by Forcepoint's security
researchers Otto Airamo & Antti Levomäki.

Add a test using the capture file supplied by the reporter(s).
print-802_15_4.c diff | blob | history
tests/802_15_4-data.out [new file with mode: 0644] blob
tests/802_15_4-data.pcap [new file with mode: 0644] blob
tests/TESTLIST diff | blob | history
[mirror] the TCPdump network dissector