Wireshark-bugs: [Wireshark-bugs] [Bug 8603] Endless loop in vnc_hextile_encoding
Date: Mon, 22 Apr 2013 14:40:20 +0000

changed bug 8603

What Removed Added
Status UNCONFIRMED INCOMPLETE
CC   eapache@gmail.com
Ever confirmed   1

Comment # 2 on bug 8603 from
(In reply to comment #1)
> Hi,
> 
> as num_subrects is defined as a guint8, I do not understand how it could be
> set to 256. Am I missing something ?

This seems very odd to me as well. Both i and num_subrects are guint8s, so any
value num_subrects could possible take will also be reached by i, ending the
loop (since the conditional is < not <=).

Potentially a compiler bug that is promoting num_subrects for optimization
without checking properly? Even so, it's assigned the result of
tvb_get_guint8() which can't return more than 255 anyways.


You are receiving this mail because:
  • You are watching all bug changes.