Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add a sanity check on packet header length | Francois-Xavier Le Bail | 2018-02-07 | 1 | -0/+0 |
| | | | | | | | | | | | | | | | | | | The packet length must be <= MAXIMUM_SNAPLEN. Currently, there is no D-Bus printer, thus no need for a bigger length. Now a pachet is valid if: capture length != 0, packet length != 0, capture length <= MAXIMUM_SNAPLEN, packet length <= MAXIMUM_SNAPLEN, packet length >= capture length. Moreover: Fix the packet header lengths of some fuzzed pcap files: If the lengths are > MAXIMUM_SNAPLEN, set them to MAXIMUM_SNAPLEN. Thus they will be always usable with this new sanity check. | ||||
* | Fix some more corrupt pcapng files, turning them into pcap files. | Guy Harris | 2018-02-06 | 1 | -0/+0 |
| | |||||
* | CVE-2017-11108/Fix bounds checking for STP. | Guy Harris | 2017-07-22 | 1 | -0/+0 |
Check whether the flags are in the captured data before printing them in an MSTP BPDU. Check whether V4 length is in the captured data before fetching it. This fixes a vulnerability discovered by Kamil Frankowicz. Include a test for the "check whether the V4 length is..." fix, using the capture supplied by Kamil Frankowicz. |