Wireshark-commits: [Wireshark-commits] master 3cd5ac3: BER: don't use invalid time offsets.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>
Date: Mon, 28 Jan 2019 15:00:41 +0000
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3cd5ac36e20d56a43e002b926aec3b99488c85a1
Submitter: "Peter Wu <peter@xxxxxxxxxxxxx>"
Changed: branch: master
Repository: wireshark

Commits:

3cd5ac3 by Dario Lombardo (lomato@xxxxxxxxx):

    BER: don't use invalid time offsets.
    
    4 digits values could overflow the destination buffer. Skip them
    since they're invalid and can only from tainted data.
    
    Bug: 15447
    Change-Id: Ice6d4f144597499483160ecaa63702025ab86f61
    Reviewed-on: https://code.wireshark.org/review/31751
    Petri-Dish: Peter Wu <peter@xxxxxxxxxxxxx>
    Tested-by: Petri Dish Buildbot
    Reviewed-by: Peter Wu <peter@xxxxxxxxxxxxx>
    

Actions performed:

    from  7a06a66   couchbase: update list of HELLO features
     add  3cd5ac3   BER: don't use invalid time offsets.


Summary of changes:
 epan/dissectors/packet-ber.c | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)