From e0224c52864f79740f95dd545a1c2974dde0bbce Mon Sep 17 00:00:00 2001
From: Gerald Combs <gerald@wireshark.org>
Date: Thu, 28 Apr 2005 03:31:20 +0000
Subject: Check an AVP length.  Fixes bug 128.

svn path=/trunk/; revision=14210
---
 epan/dissectors/packet-radius.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/epan/dissectors/packet-radius.c b/epan/dissectors/packet-radius.c
index 4765d358a2..52976c8c42 100644
--- a/epan/dissectors/packet-radius.c
+++ b/epan/dissectors/packet-radius.c
@@ -3780,6 +3780,8 @@ static void rd_value_to_str(gchar *dest, rd_vsa_buffer (*vsabuffer)[VSABUFFER],
 					: "Unknown Type"),
 				vsa_avph->avp_type, vsa_avph->avp_length);
 			cont = &cont[strlen(cont)];
+                	if (!avp_length_check(cont, vsa_avph, 1))
+			  return;
 			rd_value_to_str(cont, vsabuffer, vsa_avph, tvb,
 					offset+vsa_len, next_attr_info,
 					tree);
-- 
cgit v1.2.1