summaryrefslogtreecommitdiff
path: root/tests/stp-v4-length-sigsegv.pcap
Commit message (Collapse)AuthorAgeFilesLines
* Add a sanity check on packet header lengthFrancois-Xavier Le Bail2018-02-071-0/+0
| | | | | | | | | | | | | | | | | | The packet length must be <= MAXIMUM_SNAPLEN. Currently, there is no D-Bus printer, thus no need for a bigger length. Now a pachet is valid if: capture length != 0, packet length != 0, capture length <= MAXIMUM_SNAPLEN, packet length <= MAXIMUM_SNAPLEN, packet length >= capture length. Moreover: Fix the packet header lengths of some fuzzed pcap files: If the lengths are > MAXIMUM_SNAPLEN, set them to MAXIMUM_SNAPLEN. Thus they will be always usable with this new sanity check.
* Fix some more corrupt pcapng files, turning them into pcap files.Guy Harris2018-02-061-0/+0
|
* CVE-2017-11108/Fix bounds checking for STP.Guy Harris2017-07-221-0/+0
Check whether the flags are in the captured data before printing them in an MSTP BPDU. Check whether V4 length is in the captured data before fetching it. This fixes a vulnerability discovered by Kamil Frankowicz. Include a test for the "check whether the V4 length is..." fix, using the capture supplied by Kamil Frankowicz.