Wireshark-bugs: [Wireshark-bugs] [Bug 3572] fuzz testing crashes tshark at emem.c:797

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 27 Jun 2009 12:54:08 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3572


Kovarththanan Rajaratnam <kovarththanan.rajaratnam@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3219|                            |review_for_checkin?
               Flag|                            |




--- Comment #4 from Kovarththanan Rajaratnam <kovarththanan.rajaratnam@xxxxxxxxx>  2009-06-27 12:54:07 PDT ---
Created an attachment (id=3219)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3219)
Handle malformed SDU length in L2CAP I-frame

This patch ensures that we use an SDU length of at least the length of the
first L2CAP I-frame. This way we don't overrun the allocated reassemble buffer
in the tvb_memcpy() call.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.