Wireshark · Wireshark-commits: [Wireshark-commits] rev 41776: /trunk-1.4/ /trunk-1.4/epan/dissectors/: packet-mp2t.c /trunk-1.4/doc

[gerald@xxxxxxxxxxxxx]

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=41776

User: gerald
Date: 2012/03/26 01:21 PM

Log:
 Copy over r41057 from trunk-1.6:
 
   ------------------------------------------------------------------------
   r41057 | guy | 2012-02-17 16:01:02 -0800 (Fri, 17 Feb 2012) | 10 lines
   Changed paths:
      M /trunk-1.6/epan/dissectors/packet-mp2t.c
 
   Don't trust the pointer value in a packet; it could be invalid, and this
   could cause an unsigned length value to be reduced by more than its
   value, turning it into a very large value.
 
   This is, in effect, a backport of r41001 and r41002 to 1.6, although the
   code path is different enough that it had to be done by hand.  I don't
   know whether bug 6833 would show up in 1.6, but, in any case, clearly
   setting remaining_length to a negative number Would Be Wrong, so let's
   not do that.
   ------------------------------------------------------------------------
 
 Update the release notes.

Directory: /trunk-1.4/epan/dissectors/
  Changes    Path             Action
  +16 -1     packet-mp2t.c    Modified

Directory: /trunk-1.4/docbook/
  Changes    Path                 Action
  +18 -0     release-notes.xml    Modified