Wireshark-bugs: [Wireshark-bugs] [Bug 7563] Capture file that crashes wireshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 6 Aug 2012 11:32:41 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563

--- Comment #8 from Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> 2012-08-06 11:32:40 PDT ---
(Copy of bug #7578 comment 1)

Buffer overflow of in_fmt->m_vc_index_array:

Breakpoint 1, channelised_fill_sdh_g707_format() at packet-erf.c:700

700  in_fmt->m_vc_index_array[ speed - 1] = 0;
701  /* for STM64 traffic,from #D and so on .. */
702  for (i = (speed - 2); i >= 0; i--)
703  {
        /* ... */
716     in_fmt->m_vc_index_array[i] = aug_n_index;
717   }

(gdb) print speed
$1 = 163

(gdb) call sizeof(in_fmt->m_vc_index_array)/sizeof(in_fmt->m_vc_index_array[0])
$2 = 4

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.