Wireshark-bugs: [Wireshark-bugs] [Bug 4083] Buildbot crash output: fuzz-2009-10-02-4686.pcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 2 Oct 2009 20:10:44 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4083


Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #2 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>  2009-10-02 20:10:41 PDT ---
Rev 30233 changed chunk_size in req_resp_hdrs_do_reassembly() to be unsigned. 
In this fuzzed capture, the chunk_size comes out to -10 (signed) which causes
the problem seen here.

Arguably the HTTP chunk size cannot be negative therefore the variable should
be unsigned.  Add a guard to ensure that this unsigned value is not "too big"
(currently 2^31).

Fixed in rev 30260.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.