http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=22656
User: lego
Date: 2007/08/25 02:16 PM
Log:
Initialize to zero all subids in oid_string2subid() to avoid creating bogus oids. This is aspirin for a buffer overflow somewhere in the code that reads cretificates, that dimensions a buffer probably assumung oid subids are few digits while they can actually be bigger.
Place two DISSECTOR_ASSERT() guards to avoid an (I believe impossible) buffer overflow of the ep_allocated subid array in oid_string2subid() and oid_encoded2subid().
Directory: /trunk/epan/
Changes Path Action
+9 -4 oids.c Modified