Page MenuHomeFreeBSD

tcpdump: cope with incorrect packet lengths
ClosedPublic

Authored by kp on Apr 1 2024, 2:08 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Nov 25, 11:18 PM
Unknown Object (File)
Tue, Nov 25, 4:03 PM
Unknown Object (File)
Tue, Nov 25, 4:17 AM
Unknown Object (File)
Mon, Nov 17, 8:05 AM
Unknown Object (File)
Wed, Nov 5, 3:42 PM
Unknown Object (File)
Wed, Nov 5, 2:28 PM
Unknown Object (File)
Wed, Nov 5, 2:23 PM
Unknown Object (File)
Tue, Nov 4, 10:21 AM
Subscribers

Details

Summary

It's possible for the capture buffer to be smaller than indicated by the
header length. However, pfsync_print() only took the header length into
account. As a result we could read outside of the buffer.

Check that we have at least the expected amount of data before we start
parsing.

PR: 278034
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 56858
Build 53746: arc lint + arc unit