http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=41776
User: gerald
Date: 2012/03/26 01:21 PM
Log:
Copy over r41057 from trunk-1.6:
------------------------------------------------------------------------
r41057 | guy | 2012-02-17 16:01:02 -0800 (Fri, 17 Feb 2012) | 10 lines
Changed paths:
M /trunk-1.6/epan/dissectors/packet-mp2t.c
Don't trust the pointer value in a packet; it could be invalid, and this
could cause an unsigned length value to be reduced by more than its
value, turning it into a very large value.
This is, in effect, a backport of r41001 and r41002 to 1.6, although the
code path is different enough that it had to be done by hand. I don't
know whether bug 6833 would show up in 1.6, but, in any case, clearly
setting remaining_length to a negative number Would Be Wrong, so let's
not do that.
------------------------------------------------------------------------
Update the release notes.
Directory: /trunk-1.4/epan/dissectors/
Changes Path Action
+16 -1 packet-mp2t.c Modified
Directory: /trunk-1.4/docbook/
Changes Path Action
+18 -0 release-notes.xml Modified