Ethereal-dev: Re: [ethereal-dev] Insta-crash.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 4 Jul 2000 00:04:37 -0700
On Tue, Jul 04, 2000 at 01:43:52AM -0500, Christopher R. Hertel wrote:
> To reproduce the crash, load the capture and select packet #2.

...which has a Really Long octet string value for the variable binding
in the packet.

The code in all current releases formats the octet-string value into a
fixed-length buffer, and will crash if it overruns the buffer; the
current code in CVS allocates a buffer big enough for the value, and
shouldn't crash (doesn't crash, in my test, linked with UCD SNMP, but
it shouldn't crash when not linked with it, either).