]> The Tcpdump Group git mirrors - tcpdump/commit
CVE-2017-13725/IPv6 R.H.: Check for the existence of all fields before fetching them.
authorGuy Harris <[email protected]>
Sat, 4 Feb 2017 11:18:44 +0000 (03:18 -0800)
committerDenis Ovsienko <[email protected]>
Wed, 13 Sep 2017 11:25:44 +0000 (12:25 +0100)
commit3c4d7c0ee30a30e5abff3d6d9586a3753101faf5
tree1d0140c408a6e78321e448d003b56adcda4c0202
parent66df248b49095c261138b5a5e34d341a6bf9ac7f
CVE-2017-13725/IPv6 R.H.: Check for the existence of all fields before fetching them.

Don't fetch the length field from the header until after we've checked
for the existence of a field at or after that field.

(Found by code inspection, not by a capture.)
print-rt6.c