Comment # 1
on bug 9190
from Guy Harris
proto_item_set_end() is being told to set the length of an item, and has been
handed an offset that's supposed to be at or after the beginning of the item
but is actually *before* the beginning of the item.
Unfortunately, the offending packet is probably at the end of a TDS PDU that
takes multiple TCP segments, so it's not being fully dissected. We might have
to look at each of the proto_item_set_end() to make sure there's no way that
the offset can go backwards (or that the offset is just bogus).
You are receiving this mail because:
- You are watching all bug changes.
