http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=976
------- Comment #4 from martin.mathieson@xxxxxxxxxxxx 2006-07-21 09:01 GMT -------
As I say, I don't get the crash here.
The fuzz testing generated a %s inside the parameter name. This means that its
looking for a string arg that doesn't exist. Which means that although the
patch that's been applied makes the string display better, it doesn't fix the
bug for implementations of vsnprintf() that can't cope with missing args for
specifiers.
proto_tree_add_text() is called in thousands of places - are they all
vulnerable to deliberately added specifiers?
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.