Wireshark-bugs: [Wireshark-bugs] [Bug 12400] ICMPv6 dissector doesn't respect actual packet leng

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 30 Apr 2016 19:47:28 +0000

Comment # 2 on bug 12400 from 
(In reply to Michael Mann from comment #1)
> This issue only exists on the 1.12 branch and what appears to "save" the
> other branches is better checking of IP version in the packet.  Byte 146 is
> 05 while in the IP(v4) dissector and 2.0/master branches reject that as an
> unsupported version.
> Is adding a "version check" really all that's needed or could the ICMPv6
> packet be better crafted to still have a Really Long Loop even with the
> check in place?

I think it could even with the check, yes.

The ICMPv6 Redirected Header option dissection needs to be fixed to not read
past the option length, 8 bytes in this case.

I'll work on a patch.

You are receiving this mail because:
  • You are watching all bug changes.