Evan Huus
changed
bug 10491
Comment # 1
on bug 10491
from Evan Huus
This looks like tvb_get_ts_23_038_7bits_string is legitimately reading past the
end of the TVB - it's a bug in that function, not in the dissector proper.
I don't see any obvious overflows or underflows, so I'm guessing it's some
subtle logic bug in the tvb function or the getter function, where the length
calculation isn't working out to the right value so the ensure_contiguous call
doesn't check enough data?
Make the ensure_contiguous call check for "length+8" is enough to "fix" it,
though obviously the wrong solution.
You are receiving this mail because:
- You are watching all bug changes.