URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2ace6ba40268c5346ccc7759342d55f60669c2c
Submitter: Alexis La Goutte (alexis.lagoutte@xxxxxxxxx)
Changed: branch: master-1.10
Repository: wireshark
Commits:
a2ace6b by Alexis La Goutte (alexis.lagoutte@xxxxxxxxx):
MIPv6: Mobility Option Binding Authorization Data for FMIPv6 Authenticator field is read beyond the option data
There's a single IPv6 packet with Binding Authorization Data for FMIPv6 mobility option.
The option's data length is 14 but and since the SPI takes 4 bytes, the Authenticator field should take 10 bytes.
However, the Authenticator field is read until the end of the packet, which is 178 bytes.
Found by boaz
Bug: 10577
Change-Id: Ia79c5131d8477c1a7c111c47c2a94e990bbeae4d
Reviewed-on: https://code.wireshark.org/review/4817
Reviewed-by: Michael Mann <mmann78@xxxxxxxxxxxx>
(cherry picked from commit 8a10f77ab4d7722efc95170771540eb93b2c2f16)
Change-Id: Ia79c5131d8477c1a7c111c47c2a94e990bbeae4d
Reviewed-on: https://code.wireshark.org/review/4822
Reviewed-by: Alexis La Goutte <alexis.lagoutte@xxxxxxxxx>
Actions performed:
from 19141fe MIPv6: Mobility Option Mobile Node Link Layer Identifier Link-layer Identifier field is read beyond the option data
adds a2ace6b MIPv6: Mobility Option Binding Authorization Data for FMIPv6 Authenticator field is read beyond the option data
Summary of changes:
epan/dissectors/packet-mip6.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)