An SDNV length > 8 is also not dissectable. Should fix bug 6601.

svn path=/trunk/; revision=39974
This commit is contained in:
Guy Harris 2011-11-21 17:49:27 +00:00
parent 81a16331f8
commit baa84e09f2
1 changed files with 1 additions and 1 deletions

View File

@ -1066,7 +1066,7 @@ dissect_version_5_and_6_primary_header(packet_info *pinfo,
/* Primary Header Processing Flags */
pri_hdr_procflags = (guint8) (bundle_processing_control_flags & 0x7f);
if (sdnv_length < 1) {
if (sdnv_length < 1 || sdnv_length > 8) {
expert_add_info_format(pinfo, primary_tree, PI_UNDECODED, PI_WARN,
"Wrong bundle control flag length: %d", sdnv_length);
return 0;