summaryrefslogtreecommitdiff
path: root/tests/atm-heapoverflow.pcap
Commit message (Collapse)AuthorAgeFilesLines
* Add a sanity check on packet header lengthFrancois-Xavier Le Bail2018-02-071-0/+0
| | | | | | | | | | | | | | | | | | The packet length must be <= MAXIMUM_SNAPLEN. Currently, there is no D-Bus printer, thus no need for a bigger length. Now a pachet is valid if: capture length != 0, packet length != 0, capture length <= MAXIMUM_SNAPLEN, packet length <= MAXIMUM_SNAPLEN, packet length >= capture length. Moreover: Fix the packet header lengths of some fuzzed pcap files: If the lengths are > MAXIMUM_SNAPLEN, set them to MAXIMUM_SNAPLEN. Thus they will be always usable with this new sanity check.
* CVE-2017-5484/ATM: fix an incorrect bounds checkDenis Ovsienko2017-01-181-0/+0
The function sig_print() did receive a correct caplen parameter value but didn't use it correctly and could overread by one byte as Brian Carpenter has demonstrated. Fix it by switching to the standard macros.