]> The Tcpdump Group git mirrors - tcpdump/commit
projects / tcpdump / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 9be4e0b) | patch
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced by previous fix.
authorGuy Harris <[email protected]>
Tue, 21 Feb 2017 21:40:19 +0000 (13:40 -0800)
committerDenis Ovsienko <[email protected]>
Wed, 13 Sep 2017 11:25:44 +0000 (12:25 +0100)
commita7e5f58f402e6919ec444a57946bade7dfd6b184
tree75ddad84e87bce0e8efd9bc3bf2ef265debb2f7ctree
parent9be4e0b5938b705e7e36cfcb110a740c6ff0cb97commit | diff
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced by previous fix.

We've already advanced the pointer past the PAN ID, if present; it now
points to the address, so don't add 2 to it.

This fixes a buffer over-read discovered by Forcepoint's security
researchers Otto Airamo & Antti Levomäki.

Add a test using the capture file supplied by the reporter(s).
print-802_15_4.c diff | blob | history
tests/802_15_4-data.out [new file with mode: 0644] blob
tests/802_15_4-data.pcap [new file with mode: 0644] blob
tests/TESTLIST diff | blob | history
[mirror] the TCPdump network dissector