diff options
| author | Pascal Quantin <pascal.quantin@gmail.com> | 2015-10-24 11:32:16 +0200 |
|---|---|---|
| committer | Pascal Quantin <pascal.quantin@gmail.com> | 2015-10-25 12:12:45 +0000 |
| commit | e1979529b682a3b9b0bcefe3a54058c5ae314c5b (patch) | |
| tree | 90561df23552b9a0e980c71f94fd8461a0592347 | |
| parent | 3b42eabd77a132ff7503af3b0eb7daed82ca700c (diff) | |
| download | wireshark-e1979529b682a3b9b0bcefe3a54058c5ae314c5b.tar.gz | |
SDP: protect against out of bounds access
Change-Id: I4b24441cb26757b639e8113cab18d64c7f07112f
Ping-Bug: 9887
Reviewed-on: https://code.wireshark.org/review/11241
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
(cherry picked from commit 2ddd92b6f8f587325b9e14598658626f3a007c5c)
Reviewed-on: https://code.wireshark.org/review/11261
| -rw-r--r-- | epan/dissectors/packet-sdp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/epan/dissectors/packet-sdp.c b/epan/dissectors/packet-sdp.c index 8062045c0d..96c2bd4ad8 100644 --- a/epan/dissectors/packet-sdp.c +++ b/epan/dissectors/packet-sdp.c @@ -2617,7 +2617,7 @@ dissect_sdp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) /* Free the remainded hash tables not used */ /* XXX - more placeholder functionality */ if (transport_info == &local_transport_info) { - for (n = transport_info->media_count; n < SDP_MAX_RTP_CHANNELS; n++) + for (n = MAX(transport_info->media_count, 0); n < SDP_MAX_RTP_CHANNELS; n++) { if (!transport_info->media[n].set_rtp) { |