wireshark/writecap
Guy Harris b8b9bbcbd3 *Always* write out the trailing pcapng block total length in host byte order.
In the fast-path "no options" case for writing an Enhanced Packet Block,
just copy the block total length to the buffer, don't put it into the
buffer in little-endian byte order.  If we're running on a big-endian
machine, and thus *should* be writing out multi-byte integral block
fields in big-endian byte order, that'll write out a corrupt pcapng
file.

Bug: 13802
Change-Id: I33958e3fc1d205ca6df3ef4057d92b461831c50e
Reviewed-on: https://code.wireshark.org/review/22753
Petri-Dish: Guy Harris <guy@alum.mit.edu>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-07-21 12:59:28 +00:00
..
.editorconfig
CMakeLists.txt cmake: make WERROR_COMMON_FLAGS a normal string 2016-09-30 20:08:02 +00:00
Makefile.am Remove Makefile.common files 2016-06-30 11:04:17 +00:00
doxygen.cfg.in Fix some copy/pasteos for writecap using doxygen 2016-03-26 00:51:14 +00:00
pcapio.c *Always* write out the trailing pcapng block total length in host byte order. 2017-07-21 12:59:28 +00:00
pcapio.h