Detect an infinite loop in dissect_rsvp_ero_rro_subobjects(). Fixes bug 71.

svn path=/trunk/; revision=14128
This commit is contained in:
Gerald Combs 2005-04-18 16:29:54 +00:00
parent 7a412fadf3
commit 8e0186b2da
1 changed files with 2 additions and 0 deletions

View File

@ -3330,6 +3330,8 @@ dissect_rsvp_ero_rro_subobjects (proto_tree *ti, proto_tree *rsvp_object_tree,
}
if(tvb_get_guint8(tvb, offset+l+1) == 0)
THROW(ReportedBoundsError);
l += tvb_get_guint8(tvb, offset+l+1);
if (l < obj_length - 4) {
if (i < 4)