UMTS FP: fix another out of bounds access
authorPascal Quantin <pascal.quantin@gmail.com>
Sun, 18 Oct 2015 08:58:37 +0000 (10:58 +0200)
committerPascal Quantin <pascal.quantin@gmail.com>
Sun, 18 Oct 2015 10:25:46 +0000 (10:25 +0000)
According to NBAP ASN.1, the maximum DCH ID value is 255

Bug: 11606
Change-Id: Ic5c85a31eb1a84d59f25baaed4afbd040a7852c5
Reviewed-on: https://code.wireshark.org/review/11126
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
epan/dissectors/packet-umts_fp.c

index 86588fea8f83b9bdaaf836a4de8a4733046d50db..d1af4e72e18c77e9aaa26ea5dcec0d6ab3477cce 100644 (file)
@@ -3808,7 +3808,7 @@ heur_dissect_fp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data
     return TRUE;
 }
 static guint8 fakes =5; /*[] ={1,5,8};*/
-static guint8 fake_map[31];
+static guint8 fake_map[256];
 
  /*
  * TODO: This need to be fixed!