Wireshark-commits: [Wireshark-commits] rev 33846: /trunk/epan/dissectors/ /trunk/epan/dissectors/:
Date: Thu, 19 Aug 2010 02:17:11 GMT
http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=33846

User: morriss
Date: 2010/08/18 07:17 PM

Log:
 Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5114 (infinite loop in
 bootp dissector when dissecting packetcable MTA capabilities).
 
 Limit the tlv_len to G_MAXUINT16 to prevent an integer overflow from causing us to
 increment the working offset by 0 (thus causing us to loop).

Directory: /trunk/epan/dissectors/
  Changes    Path              Action
  +35 -34    packet-bootp.c    Modified