ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12121] Buildbot crash output: fuzz-2016-02-13-6270.pcap

Date: Mon, 15 Feb 2016 11:22:22 +0000

Comment # 2 on bug 12121 from
The offending code is probably

        /*Configure the pdus*/
        for (i=0;i<number_of_pdus && i<MIN(MAX_MAC_FRAMES, MAX_RLC_CHANS); i++)
{
            macinf->content[i] =
hsdsch_macdflow_id_mac_content_map[p_fp_info->hsdsch_macflowd_id];
/*MAC_CONTENT_PS_DTCH;*/
            macinf->lchid[i] =
fake_lchid_macd_flow[p_fp_info->hsdsch_macflowd_id];/*Faked logical channel id
255 used as a mark if it doesn't exist...*/
            macinf->fake_chid[i] = TRUE;    /**/

in dissect_hsdsch_channel_info(), with the offending line being the one that
looks up an entry in fake_lchid_macd_flow[]; that array has 6 elements, but it
probably needs to have 8 elements, given that p_fp_info->hsdsch_macflowd_id is
used as an index into an 8-element array and thus presumably can have values
from 0 to 7.

Anders?  Any idea what should be done here?


You are receiving this mail because:
  • You are watching all bug changes.