diff options
| author | Guy Harris <guy@alum.mit.edu> | 2015-07-03 19:08:59 -0700 |
|---|---|---|
| committer | Francois-Xavier Le Bail <fx.lebail@yahoo.com> | 2017-01-18 09:16:37 +0100 |
| commit | e8a77162825188bd31eb96c99dc8e4432a2c6531 (patch) | |
| tree | e8be7d508d09eadd2eadc398832d57073d3d0184 /tests/gre-heapoverflow-1.out | |
| parent | 69ead2a09cf7d0666c6a7ac12e47fd9743242c61 (diff) | |
| download | tcpdump-e8a77162825188bd31eb96c99dc8e4432a2c6531.tar.gz | |
CVE-2016-7974/Don't try to dissect something with other than 4 as the IP version.
Bad Things could happen, e.g. the dissector we call thinking it's been
handed an IPv6 header when we haven't handed it anything that large.
Fixes a heap overflow found with American Fuzzy Lop by Hanno Böck.
Update some .out files to correspond to that change.
Diffstat (limited to 'tests/gre-heapoverflow-1.out')
| -rw-r--r-- | tests/gre-heapoverflow-1.out | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/tests/gre-heapoverflow-1.out b/tests/gre-heapoverflow-1.out index a9b7fd3c..322c329a 100644 --- a/tests/gre-heapoverflow-1.out +++ b/tests/gre-heapoverflow-1.out @@ -5,5 +5,4 @@ 0x0030: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000 0x0040: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000 0x0050: 3030 3030 0000 -IP0 (tos 0x30, ttl 48, id 12336, offset 0, flags [none], proto GRE (47), length 12336, options (unknown 48 [bad length 48]), bad cksum 3030 (->855e)!) - 48.48.48.48 > 48.48.48.48: GREv0, Flags [checksum present, routing present, sequence# present, source routing present][|gre] +IP0 |