Wireshark-commits: [Wireshark-commits] master d9e5021: hip: fix infinite loop in dissect_hip_tlv
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d9e5021fe79973d00ddd8fcef0bbefbaae63dd0f
Submitter: Evan Huus (eapache@xxxxxxxxx)
Changed: branch: master
Repository: wireshark
Commits:
d9e5021 by Evan Huus (eapache@xxxxxxxxx):
hip: fix infinite loop in dissect_hip_tlv
We can't use tree_item == NULL to determine which branch of the previous if was
hit, since proto_tree_add_item can return NULL when run without tree, which was
leading to an infinite loop since we were never advancing the offset. Use the
actual locator_type instead.
Introduced by either g3635d7bed70 or gebff85fdbb although neither of them
directly touch this code path. I'm guess that g3635d7bed70 removed an if (tree)
guard in some calling function which would have prevented this, but I haven't
checked. The bug would still have been there before, it just wouldn't have been
hit because it's only present with a NULL tree. Somebody more familiar with the
protocol should probably go over a capture or two and make sure this isn't a
symptom of some other decoding gone awry in the recent changes.
Change-Id: Ie1ce89b16ef667b437c0d99c25e3f3cb2504347d
Reviewed-on: https://code.wireshark.org/review/3564
Reviewed-by: Evan Huus <eapache@xxxxxxxxx>
Actions performed:
from 20721cb http2: C90 doesn't permit anonymous structs or unions
adds d9e5021 hip: fix infinite loop in dissect_hip_tlv
Summary of changes:
epan/dissectors/packet-hip.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
