]> The Tcpdump Group git mirrors - tcpdump/commit
CVE-2017-13030/PIM: Redo bounds checks and add length checks.
authorGuy Harris <[email protected]>
Wed, 22 Mar 2017 21:09:28 +0000 (14:09 -0700)
committerDenis Ovsienko <[email protected]>
Wed, 13 Sep 2017 11:25:44 +0000 (12:25 +0100)
commit5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc
tree61c4957fb95780b4e54532dc0b04d9c18ea2c46c
parent7029d15f148ef24bb7c6668bc640f5470d085e5a
CVE-2017-13030/PIM: Redo bounds checks and add length checks.

Use ND_TCHECK macros to do bounds checking, and add length checks before
the bounds checks.

Add a bounds check that the review process found was missing.

This fixes a buffer over-read discovered by Bhargava Shastry,
SecT/TU Berlin.

Add a test using the capture file supplied by the reporter(s), modified
so the capture file won't be rejected as an invalid capture.

Update one test output file to reflect the changes.
print-pim.c
tests/TESTLIST
tests/heapoverflow-in_checksum.out
tests/pim_header_asan.out [new file with mode: 0644]
tests/pim_header_asan.pcap [new file with mode: 0644]