Wireshark · Wireshark-commits: [Wireshark-commits] master-1.12 5d75a6b: MIPv6: Mobility Option Binding Authorization Data for FMIPv

[Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>]

URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5d75a6b1c401a4d0536ef67571a8fd1146819272
Submitter: Alexis La Goutte (alexis.lagoutte@xxxxxxxxx)
Changed: branch: master-1.12
Repository: wireshark

Commits:

5d75a6b by Alexis La Goutte (alexis.lagoutte@xxxxxxxxx):

    MIPv6: Mobility Option Binding Authorization Data for FMIPv6 Authenticator field is read beyond the option data
    
    There's a single IPv6 packet with Binding Authorization Data for FMIPv6 mobility option.
    The option's data length is 14 but and since the SPI takes 4 bytes, the Authenticator field should take 10 bytes.
    However, the Authenticator field is read until the end of the packet, which is 178 bytes.
    
    Found by boaz
    Bug: 10577
    Change-Id: Ia79c5131d8477c1a7c111c47c2a94e990bbeae4d
    Reviewed-on: https://code.wireshark.org/review/4817
    Reviewed-by: Michael Mann <mmann78@xxxxxxxxxxxx>
    (cherry picked from commit 8a10f77ab4d7722efc95170771540eb93b2c2f16)
    Change-Id: Ia79c5131d8477c1a7c111c47c2a94e990bbeae4d
    Reviewed-on: https://code.wireshark.org/review/4821
    Reviewed-by: Alexis La Goutte <alexis.lagoutte@xxxxxxxxx>
    

Actions performed:

    from  182aba9   MIPv6: Mobility Option IPv6 Address/Prefix marks too many bytes for the address/prefix field
    adds  5d75a6b   MIPv6: Mobility Option Binding Authorization Data for FMIPv6 Authenticator field is read beyond the option data


Summary of changes:
 epan/dissectors/packet-mip6.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)