Martin Kaiser
changed
bug 9485
Comment # 1
on bug 9485
from Martin Kaiser
This is an interesting one.
In dissect_ppi(), the fuzzing changed dlt to 224 (==fc). dissector_try_uint()
calls the fc dissector, which needs a data parameter, with data="" data is
dereferenced, wireshark crashes.
Potentially, this could happen to any new-style dissector with a data
parameter, even if the normal code paths always set data to a reasonable value
I modified the fc dissector in r53617 to reject the packet when data=""
I'll leave the bug open for others to comment.
You are receiving this mail because:
- You are watching all bug changes.