Wireshark-commits: [Wireshark-commits] master-1.8 f567435: Add a check for an oversized record.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>
Date: Thu, 6 Mar 2014 19:49:12 +0000 (UTC)
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09
Submitter: Gerald Combs (gerald@xxxxxxxxxxxxx)
Changed: branch: master-1.8
Repository: wireshark

Commits:

f567435 by Gerald Combs (gerald@xxxxxxxxxxxxx):

    Add a check for an oversized record.
    
    For now we declare the file corrupt and give up. We may want to handle
    this more gracefully. Fixes a vulnerability discovered by Wesley Neelen
    (bug 9843).
    
    Remove the RCS ID and add modelines.
    
    Change-Id: I418938d7d6485b27cc51cf1dde50bc42dabf8c85
    Reviewed-on: https://code.wireshark.org/review/533
    Reviewed-by: Gerald Combs <gerald@xxxxxxxxxxxxx>
    (cherry picked from commit 34144b8d4da141e8aa9b99221855edc9f4c73ad8)
    Reviewed-on: https://code.wireshark.org/review/534
    

Actions performed:

    from  3b72014   Add CVE IDs.
    adds  f567435   Add a check for an oversized record.


Summary of changes:
 wiretap/mpeg.c |   40 ++++++++++++++++++++++++++++++++--------
 1 file changed, 32 insertions(+), 8 deletions(-)