Wireshark-commits: [Wireshark-commits] master-2.6 c092f65: ber: fix buffer overrun (read) in dissec
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>
Date: Sat, 02 Jun 2018 22:07:14 +0000
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=c092f65f209797c8c18a5bdb70d666e8ae77fb23
Submitter: Guy Harris (guy@xxxxxxxxxxxx)
Changed: branch: master-2.6
Repository: wireshark

Commits:

c092f65 by Peter Wu (peter@xxxxxxxxxxxxx):

    ber: fix buffer overrun (read) in dissect_ber_constrained_bitstring
    
    The length is an unsigned integer, but some users (such as tvb_memdup)
    expect signed integers and treat negative values specially.
    
    Bug: 14682
    Change-Id: Ic3330d23d964b5cc44718b61c8985880f901674d
    Link: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8011
    Reviewed-on: https://code.wireshark.org/review/27562
    Petri-Dish: Peter Wu <peter@xxxxxxxxxxxxx>
    Tested-by: Petri Dish Buildbot
    Reviewed-by: Anders Broman <a.broman58@xxxxxxxxx>
    (cherry picked from commit df5a8b29bbb046933b73e9e369b9bc9e4b03aaa8)
    Reviewed-on: https://code.wireshark.org/review/27962
    Reviewed-by: Guy Harris <guy@xxxxxxxxxxxx>
    

Actions performed:

    from  ea197d8   Fix compilation with Qt 5.11
    adds  c092f65   ber: fix buffer overrun (read) in dissect_ber_constrained_bitstring


Summary of changes:
 epan/dissectors/packet-ber.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)