diff options
| author | Francois-Xavier Le Bail <devel.fx.lebail@orange.fr> | 2017-12-17 16:10:23 +0100 |
|---|---|---|
| committer | Francois-Xavier Le Bail <devel.fx.lebail@orange.fr> | 2017-12-17 16:10:23 +0100 |
| commit | 60aaea00ccc4f7b0514c4f1ce0a2a5d4ff021614 (patch) | |
| tree | 0665fb49ed46b7ee41e26bf7bcb6f74fb43a9b4e /print-ospf.c | |
| parent | 481b700dc643be9d281791d685c04e1f7b15c1bb (diff) | |
| download | tcpdump-60aaea00ccc4f7b0514c4f1ce0a2a5d4ff021614.tar.gz | |
OSPF: Fix two bounds checks
ND_TCHECK(*lp) test for only one byte.
A test for four bytes is needed.
Diffstat (limited to 'print-ospf.c')
| -rw-r--r-- | print-ospf.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/print-ospf.c b/print-ospf.c index 9b8d7dd6..113ecde6 100644 --- a/print-ospf.c +++ b/print-ospf.c @@ -709,7 +709,7 @@ ospf_print_lsa(netdissect_options *ndo, while (lp < ls_end) { uint32_t ul; - ND_TCHECK(*lp); + ND_TCHECK_4(lp); ul = EXTRACT_BE_U_4(lp); topology = (ul & SLA_MASK_TOS) >> SLA_SHIFT_TOS; ND_PRINT((ndo, "\n\t\ttopology %s (%u) metric %d", @@ -726,7 +726,7 @@ ospf_print_lsa(netdissect_options *ndo, while (lp < ls_end) { uint32_t ul; - ND_TCHECK(*lp); + ND_TCHECK_4(lp); ul = EXTRACT_BE_U_4(lp); topology = (ul & SLA_MASK_TOS) >> SLA_SHIFT_TOS; ND_PRINT((ndo, "\n\t\ttopology %s (%u) metric %d", |