From Evan Huus: We were using guint8s as loop counters based on field lengths, and they were overflowing/wrapping falsely. Making them guint16s fixes the problem. Bug 7122 -HCIEVT infinite loop https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122

svn path=/trunk/; revision=42114
This commit is contained in:
Anders Broman 2012-04-17 21:09:10 +00:00
parent dc49bf04c0
commit cc650868af
1 changed files with 2 additions and 1 deletions

View File

@ -1269,7 +1269,8 @@ dissect_bthci_evt_inq_result_with_rssi(tvbuff_t *tvb, int offset, packet_info *p
static int
dissect_bthci_evt_ext_inquiry_response(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree)
{
guint8 i, j, length, type;
guint8 length, type;
guint16 i, j;
proto_item *ti_eir = NULL;
proto_item *ti_eir_subtree = NULL;