Wireshark-bugs: [Wireshark-bugs] [Bug 8112] MS-MMC dissector crash
Date: Fri, 21 Dec 2012 15:55:42 +0000

changed bug 8112

What Removed Added
CC   wireshark@kaiser.cx

Comment # 3 on bug 8112 from
tool_version_length is guint32

tool_version_length*2 is passed as gint length parameter to 
tvb_get_ephemeral_unicode_string()

for large enough values, tvb_get_ephemeral_unicode_string() sees a negative
length

I added a simple range check in r46678


You are receiving this mail because:
  • You are watching all bug changes.