tcpdump mailing list archives

segfault in print-bootp.c


From: alex medvedev <alexm () pycckue org>
Date: Mon, 1 Mar 2004 19:37:23 -0600 (CST)

hallo,

here is a small fix for tcpdump's print-bootp.c to fix a segfault when the
option's 81 length goes unchecked.

option 81 min size should be 4 bytes:

        http://sunsite.uakom.sk/doc/rfc/bootp-dhcp-option-81

in my case tcpdump would segfault in util.c when the FQDN len in a dhcp
client packet was set to 1.
i didn't check the other options or looked deeply into it.

thank you,

-alexm
18:41 01/03/2004

Attachment: print-bootp.patch
Description:


Current thread: