Wireshark-commits: [Wireshark-commits] master aa6b8f5: DCERPC: Make heuristics more discriminating
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>
Date: Mon, 3 Aug 2020 11:30:51 +0000
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=aa6b8f59afa2b7468cb603685e5a0df90b172e38
Submitter: "Anders Broman <a.broman58@xxxxxxxxx>"
Changed: branch: master
Repository: wireshark

Commits:

aa6b8f5 by John Thacker (johnthacker@xxxxxxxxx):

    DCERPC: Make heuristics more discriminating
    
    Make the DCE/RPC heuristics a bit more discriminating by checking
    a few more header fields for illegal values. Reduces false positives.
    
    Change-Id: Ic3d6c7ce62b64b2042922adb104294600b0db673
    Reviewed-on: https://code.wireshark.org/review/38028
    Petri-Dish: Anders Broman <a.broman58@xxxxxxxxx>
    Tested-by: Petri Dish Buildbot
    Reviewed-by: Anders Broman <a.broman58@xxxxxxxxx>
    

Actions performed:

    from  c5704d3   EPL: Include stdlib.h
     add  aa6b8f5   DCERPC: Make heuristics more discriminating


Summary of changes:
 epan/dissectors/packet-dcerpc.c | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)