]> The Tcpdump Group git mirrors - tcpdump/commit
projects / tcpdump / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 98f666f) | patch
CVE-2016-7992/When comparing against an LLC+SNAP header, check only the bytes we...
authorGuy Harris <[email protected]>
Fri, 3 Jul 2015 18:24:37 +0000 (11:24 -0700)
committerFrancois-Xavier Le Bail <[email protected]>
Wed, 18 Jan 2017 08:16:35 +0000 (09:16 +0100)
commit4ef024c8e94459e3ab9afae90e1948406e1d04db
tree2361cdbe1c18cd6675ef3284d5d231fd980c48a7tree
parent98f666f243759373773f08f8a91d42cc6f8c3e50commit | diff
CVE-2016-7992/When comparing against an LLC+SNAP header, check only the bytes we have.

Fixes a heap overflow found with American Fuzzy Lop by Hanno Böck.

Fix a length value to be unsigned while we're at it.
print-cip.c diff | blob | history
tests/TESTLIST diff | blob | history
tests/heap-overflow-2.out [new file with mode: 0644] blob
tests/heap-overflow-2.pcap [new file with mode: 0644] blob
[mirror] the TCPdump network dissector