Wireshark-bugs: [Wireshark-bugs] [Bug 13246] Uninitialized memcmp on data in daintree-sna.c
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 17 Dec 2016 00:15:42 +0000

changed bug 13246


What Removed Added
Hardware x86-64 All
OS Linux (other) All

Comment # 14 on bug 13246 from 
(In reply to Peter Wu from comment #1)
> Confirmed, this is not an exploitable issue though since the read is limited
> to the buffer size.

The worst-case situation is, I think, that the comparison will *happen* to
succeed on a file that's *not* a Daintree SNA file because the junk on the
stack *happens* to match.  Unlikely, but the code was wrong and needed to be
fixed anyway.

You are receiving this mail because:
  • You are watching all bug changes.