diff options
| author | Gerald Combs <gerald@wireshark.org> | 2005-04-28 03:31:20 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2005-04-28 03:31:20 +0000 |
| commit | e0224c52864f79740f95dd545a1c2974dde0bbce (patch) | |
| tree | e5087f4aee0a8088362a2d68d699a6ad0f4e4706 | |
| parent | 7323cb267c28722899b1b61a5f1711f269676d96 (diff) | |
| download | wireshark-e0224c52864f79740f95dd545a1c2974dde0bbce.tar.gz | |
Check an AVP length. Fixes bug 128.
svn path=/trunk/; revision=14210
| -rw-r--r-- | epan/dissectors/packet-radius.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/epan/dissectors/packet-radius.c b/epan/dissectors/packet-radius.c index 4765d358a2..52976c8c42 100644 --- a/epan/dissectors/packet-radius.c +++ b/epan/dissectors/packet-radius.c @@ -3780,6 +3780,8 @@ static void rd_value_to_str(gchar *dest, rd_vsa_buffer (*vsabuffer)[VSABUFFER], : "Unknown Type"), vsa_avph->avp_type, vsa_avph->avp_length); cont = &cont[strlen(cont)]; + if (!avp_length_check(cont, vsa_avph, 1)) + return; rd_value_to_str(cont, vsabuffer, vsa_avph, tvb, offset+vsa_len, next_attr_info, tree); |