From c177cb3800a9a68d79b2812f0ffcb9479abd6eb8 Mon Sep 17 00:00:00 2001 From: Guy Harris Date: Tue, 21 Mar 2017 19:30:48 -0700 Subject: CVE-2017-13016/ES-IS: Fix printing of addresses in RD PDUs. Always print the SNPA, and flag it as such; only print it as a MAC address if it's 6 bytes long. Identify the NET as such. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s), modified so the capture files won't be rejected as an invalid capture. --- addrtoname.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'addrtoname.h') diff --git a/addrtoname.h b/addrtoname.h index 72e5ef19..fe8b6bbe 100644 --- a/addrtoname.h +++ b/addrtoname.h @@ -33,7 +33,8 @@ enum { LINKADDR_ETHER, LINKADDR_FRELAY, LINKADDR_IEEE1394, - LINKADDR_ATM + LINKADDR_ATM, + LINKADDR_OTHER }; #define BUFSIZE 128 -- cgit v1.2.1