packet-mle.c: Fix infinite loop

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1359
Bug: 13686
Change-Id: Ibc08b6e79200264d821e755ef1e4b5da74b8cf97
Reviewed-on: https://code.wireshark.org/review/21526
Reviewed-by: Michael Mann <mmann78@netscape.net>
This commit is contained in:
Michael Mann 2017-05-05 16:22:01 -04:00
parent 82c667b1a6
commit dddde02e25
1 changed files with 2 additions and 2 deletions

View File

@ -1169,8 +1169,8 @@ dissect_mle(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
{
guint8 iid_type, i;
guint8 entries = 0;
guint8 check_len = tlv_len;
guint8 check_offset = offset;
gint16 check_len = tlv_len;
guint check_offset = offset;
/* Check consistency of entries */
while (check_len > 0) {