don't go into an (almost) endless loop, if si->info_count is -1, which is the default value. Seems to be a general bug worth to thought about, but I don't know the SMB internals and this bugfix should work anyway.

Found this by a privately fuzzed capture file (sorry, can't give it away)

svn path=/trunk/; revision=14501
This commit is contained in:
Ulf Lamping 2005-05-30 21:10:21 +00:00
parent e25b530eb5
commit e8c5cd2342
1 changed files with 6 additions and 0 deletions

View File

@ -13044,6 +13044,9 @@ dissect_transaction2_response_data(tvbuff_t *tvb, packet_info *pinfo,
/* returned data */
count = si->info_count;
if(count == -1) {
break;
}
if (count && check_col(pinfo->cinfo, COL_INFO)) {
col_append_fstr(pinfo->cinfo, COL_INFO,
", Files:");
@ -13060,6 +13063,9 @@ dissect_transaction2_response_data(tvbuff_t *tvb, packet_info *pinfo,
/* returned data */
count = si->info_count;
if(count == -1) {
break;
}
if (count && check_col(pinfo->cinfo, COL_INFO)) {
col_append_fstr(pinfo->cinfo, COL_INFO,
", Files:");