]> The Tcpdump Group git mirrors - tcpdump/commit
CVE-2017-12900/Properly terminate all struct tok arrays.
authorGuy Harris <[email protected]>
Sat, 4 Feb 2017 04:43:16 +0000 (20:43 -0800)
committerDenis Ovsienko <[email protected]>
Sun, 3 Sep 2017 23:08:58 +0000 (00:08 +0100)
commit64e09de79ae6433c5fd40ed5b5a020cd46e33e86
treea1b949408d36c593ff4395460cb2f47852c56d51
parenta3319d5788a771370d1c55d0b0ab62dbed782a09
CVE-2017-12900/Properly terminate all struct tok arrays.

This fixes a buffer over-read discovered by Forcepoint's security
researchers Otto Airamo & Antti Levomäki.

Add tests using the capture files supplied by the reporter(s).
print-bgp.c
print-lldp.c
print-lspping.c
print-zephyr.c
tests/TESTLIST
tests/tok2str-oobr-1.out [new file with mode: 0644]
tests/tok2str-oobr-1.pcap [new file with mode: 0644]
tests/tok2str-oobr-2.out [new file with mode: 0644]
tests/tok2str-oobr-2.pcap [new file with mode: 0644]