wireshark/wireshark-1.6.2-CVE-2011-3266.patch
Pavol Rusnak c87cef8c94 Accepting request 87344 from home:cyliu:branches:network:utilities
- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability

OBS-URL: https://build.opensuse.org/request/show/87344
OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=44
2011-10-11 15:51:00 +00:00

20 lines
437 B
Diff

--- trunk/epan/dissectors/packet-isakmp.c 2011/07/28 18:17:16 38246
+++ trunk/epan/dissectors/packet-isakmp.c 2011/07/28 22:19:46 38247
@@ -3880,12 +3880,13 @@
offset += 2;
length -= 2;
-
- while (length > 0) {
+ if (spi_size > 0) {
+ while (length > 0) {
proto_tree_add_item(tree, hf_isakmp_delete_spi, tvb, offset, spi_size, FALSE);
offset+=spi_size;
length-=spi_size;
- }
+ }
+ }
}