]> The Tcpdump Group git mirrors - tcpdump/commitdiff
RSVP: Add a bounds check
authorFrancois-Xavier Le Bail <[email protected]>
Mon, 4 Jul 2016 10:11:20 +0000 (12:11 +0200)
committerFrancois-Xavier Le Bail <[email protected]>
Mon, 4 Jul 2016 10:11:20 +0000 (12:11 +0200)
print-rsvp.c

index 93f6d670958d7faf64dc90971fa8097a040dc8f0..4c1eda976c4bd0e52d95626ce69ed6a8786d374f 100644 (file)
@@ -1061,6 +1061,7 @@ rsvp_obj_print(netdissect_options *ndo,
             switch(rsvp_obj_ctype) {
             case RSVP_CTYPE_IPV4:
                 while(obj_tlen >= 4 ) {
+                    ND_TCHECK2(*obj_tptr, 2);
                     ND_PRINT((ndo, "%s  Subobject Type: %s, length %u",
                            ident,
                            tok2str(rsvp_obj_xro_values,