Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 8039] MPLS infinite loop

[bugzilla-daemon@xxxxxxxxxxxxx]

Martin Kaiser changed bug 8039

What	Removed	Added
CC		wireshark@kaiser.cx

Comment # 1 on bug 8039 from Martin Kaiser

it's looping in dissect_mpls_echo_tlv_dd_map()

subtlv_length==0
while (rem>4)
invalid subtlv_type -> jumps to default -> rem is not decremented

we could return; for subtlv_length==0

Looking at RFC 6424, the whole approach is unclear to me. We seem to read
subtlv_type and _length only once and then do the while loop. Section 3.3 of
RFC6424 says that there's a list of subtlvs, I'd expect type and length to be
read in the while loop...

---

      You are receiving this mail because:

• You are watching all bug changes.