Wireshark-bugs: [Wireshark-bugs] [Bug 8039] MPLS infinite loop

Date: Mon, 03 Dec 2012 22:29:03 +0000

changed bug 8039

What Removed Added
CC   [email protected]

Comment # 1 on bug 8039 from
it's looping in dissect_mpls_echo_tlv_dd_map()

subtlv_length==0
while (rem>4)
invalid subtlv_type -> jumps to default -> rem is not decremented

we could return; for subtlv_length==0

Looking at RFC 6424, the whole approach is unclear to me. We seem to read
subtlv_type and _length only once and then do the while loop. Section 3.3 of
RFC6424 says that there's a list of subtlvs, I'd expect type and length to be
read in the while loop...


You are receiving this mail because:
  • You are watching all bug changes.