Ethereal-dev: Re: [Ethereal-dev] Pesky PROTOS packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>
Date: 26 Feb 2002 22:32:18 -0600
On Tue, 2002-02-26 at 22:04, Guy Harris wrote:
> 
> Unfortunately, "sprint_objid()" takes, as arguments:
> 
> 	a pointer to the string buffer into which to format the OID;
> 
> 	an OID pointer;
> 
> 	an OID len;
> 
> but no buffer length, so it'd either have to have a hard-wired maximum
> string size, or do no bounds checking.
> 
> The latter appears to be the case, even in 4.2.3.
> 


Perhaps the default "configure" action should be --disable-snmp
until this is fixed. It's drastic, but safer.

--gilbert