SSL: fix dissection of CertificateStatus message with OCSP_MULTI

Bug: 11181
Change-Id: I05769e254f2e276e1594d7ed5cb50496e16cfc2f
Reviewed-on: https://code.wireshark.org/review/8356
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>

1 files changed, 5 insertions, 3 deletions

diff --git a/epan/dissectors/packet-ssl.c b/epan/dissectors/packet-ssl.c
index a2811e924f..1ee3bb4cd3 100644
--- a/epan/dissectors/packet-ssl.c
+++ b/epan/dissectors/packet-ssl.c
@@ -2230,14 +2230,16 @@ dissect_ssl3_hnd_cert_status(tvbuff_t *tvb, proto_tree *tree,
         break;
     case SSL_HND_CERT_STATUS_TYPE_OCSP_MULTI:
         {
-            guint   list_len;
+            gint32 list_len;
 
             list_len = tvb_get_ntoh24(tvb, offset);
             offset += 3;
 
-            while (list_len-- > 0)
+            while (list_len > 0) {
+                guint32 prev_offset = offset;
                 offset = dissect_ssl3_ocsp_response(tvb, tree, offset, pinfo);
-
+                list_len -= offset - prev_offset;
+            }
             break;
         }
     }