Do length checking for the key ID of the enhanced auth option.

diff --git a/print-tcp.c b/print-tcp.c
index f00ff32514802bebf9dd4ad8df20b300ffeb873a..01d4c7b81471364e82ba426ba9866062080bfd81 100644 (file)
--- a/print-tcp.c
+++ b/print-tcp.c
@@ -538,6 +538,7 @@ tcp_print(netdissect_options *ndo,
                                 break;
 
                         case TCPOPT_AUTH:
+                                LENCHECK(1);
                                 ND_PRINT((ndo, " keyid %d", *cp++));
                                 datalen = len - 3;
                                 for (i = 0; i < datalen; ++i) {