Wireshark-bugs: [Wireshark-bugs] [Bug 1513] Wrong length for tvb_memcpy in packet-bthci_acl.c
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 9 May 2007 22:05:50 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1513





------- Comment #5 from jaap.keuter@xxxxxxxxx  2007-05-09 22:05 GMT -------
If l2cap_length+4 equals the full size of the payload, while the capture was
limited, then tvb_memcpy(tvb, (guint8*)mfp->reassembled,
offset, l2cap_length+4); could read past the end of the tvb.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.