[bugzilla-daemon@xxxxxxxxxxxxx]

Peter Wu changed bug 12106

What	Removed	Added
CC		peter@lekensteyn.nl

Comment # 1 on bug 12106 from Peter Wu

The problem is here:

 for (first_pass = TRUE, cset = set, set_idx = 0; cset->func || first_pass;
cset++, set_idx++) {

combined with:

 static const ber_sequence_t T_paramSet_set[] = {
   { NULL, 0, 0, 0, NULL }
 };

 static int
 dissect_ansi_tcap_T_paramSet(...) {
   offset = dissect_ber_set(..., T_paramSet_set, ...);

Because the list of possible set elements is empty, this will happen:

Iteration 0:
first_pass == TRUE;
cset == &T_paramSet_set[0];
cset->func == NULL;
condition TRUE because first_pass == TRUE

Iteration 1:
first_pass == FALSE;
cset == &T_paramSet_set[1];
Invalid memory access when reading cset->func!

I'm now checking which dissectors are affected by this (other than ansi_tcap).

---

      You are receiving this mail because:

• You are watching all bug changes.