git.samba.org
/
metze
/
wireshark
/
wip.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
317af2c
)
UMTS FP: fix another out of bounds access
author
Pascal Quantin
<pascal.quantin@gmail.com>
Sun, 18 Oct 2015 08:58:37 +0000
(10:58 +0200)
committer
Pascal Quantin
<pascal.quantin@gmail.com>
Sun, 18 Oct 2015 10:25:46 +0000
(10:25 +0000)
According to NBAP ASN.1, the maximum DCH ID value is 255
Bug: 11606
Change-Id: Ic5c85a31eb1a84d59f25baaed4afbd040a7852c5
Reviewed-on: https://code.wireshark.org/review/11126
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
epan/dissectors/packet-umts_fp.c
patch
|
blob
|
history
diff --git
a/epan/dissectors/packet-umts_fp.c
b/epan/dissectors/packet-umts_fp.c
index 86588fea8f83b9bdaaf836a4de8a4733046d50db..d1af4e72e18c77e9aaa26ea5dcec0d6ab3477cce 100644
(file)
--- a/
epan/dissectors/packet-umts_fp.c
+++ b/
epan/dissectors/packet-umts_fp.c
@@
-3808,7
+3808,7
@@
heur_dissect_fp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data
return TRUE;
}
static guint8 fakes =5; /*[] ={1,5,8};*/
-static guint8 fake_map[
31
];
+static guint8 fake_map[
256
];
/*
* TODO: This need to be fixed!