http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=49744
User: morriss
Date: 2013/06/03 07:01 PM
Log:
Fix the fuzz failure reported (by me) in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8764 :
Apply the fix from bug 8539 (r48796) to another function (dissect_r3_upstreamcommand_queryconfig()):
Bail out of the item length we get (which we use to increment the offset) is 0.
Otherwise the offset does not advance and we loop forever.
While we're in there: get the item length just once (there's no need to call
tvb_get_guint8() a half dozen times when one will do).
Directory: /trunk/epan/dissectors/
Changes Path Action
+14 -7 packet-assa_r3.c Modified