Wireshark-bugs: [Wireshark-bugs] [Bug 12106] Buildbot crash output: fuzz-2016-02-09-3681.pcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 20 Feb 2016 00:17:23 +0000

changed bug 12106


What Removed Added
CC   peter@lekensteyn.nl

Comment # 1 on bug 12106 from 
The problem is here:

 for (first_pass = TRUE, cset = set, set_idx = 0; cset->func || first_pass;
cset++, set_idx++) {

combined with:

 static const ber_sequence_t T_paramSet_set[] = {
   { NULL, 0, 0, 0, NULL }
 };

 static int
 dissect_ansi_tcap_T_paramSet(...) {
   offset = dissect_ber_set(..., T_paramSet_set, ...);

Because the list of possible set elements is empty, this will happen:

Iteration 0:
first_pass == TRUE;
cset == &T_paramSet_set[0];
cset->func == NULL;
condition TRUE because first_pass == TRUE

Iteration 1:
first_pass == FALSE;
cset == &T_paramSet_set[1];
Invalid memory access when reading cset->func!

I'm now checking which dissectors are affected by this (other than ansi_tcap).

You are receiving this mail because:
  • You are watching all bug changes.