don't go into an (almost) endless loop, if si->info_count is -1, which is the default value. Seems to be a general bug worth to thought about, but I don't know the SMB internals and this bugfix should work anyway.
Found this by a privately fuzzed capture file (sorry, can't give it away) svn path=/trunk/; revision=14501
This commit is contained in:
parent
e25b530eb5
commit
e8c5cd2342
|
@ -13044,6 +13044,9 @@ dissect_transaction2_response_data(tvbuff_t *tvb, packet_info *pinfo,
|
|||
/* returned data */
|
||||
count = si->info_count;
|
||||
|
||||
if(count == -1) {
|
||||
break;
|
||||
}
|
||||
if (count && check_col(pinfo->cinfo, COL_INFO)) {
|
||||
col_append_fstr(pinfo->cinfo, COL_INFO,
|
||||
", Files:");
|
||||
|
@ -13060,6 +13063,9 @@ dissect_transaction2_response_data(tvbuff_t *tvb, packet_info *pinfo,
|
|||
/* returned data */
|
||||
count = si->info_count;
|
||||
|
||||
if(count == -1) {
|
||||
break;
|
||||
}
|
||||
if (count && check_col(pinfo->cinfo, COL_INFO)) {
|
||||
col_append_fstr(pinfo->cinfo, COL_INFO,
|
||||
", Files:");
|
||||
|
|
Loading…
Reference in New Issue