CVSROOT:        /cvs
Module name:    src
Changes by:     k...@cvs.openbsd.org    2020/07/20 19:09:03

Modified files:
        usr.sbin/tcpdump: print-null.c 

Log message:
Avoid integer underflow due to tiny snaplen

For DLT_NULL and DLT_LOOP interfaces, print-null.c passes
`caplen - NULL_HDRLEN' as length to default_print() which takes an unsigned
integer, hence if caplen is smaller than the header itself (four octets),
this difference wraps around.

Exit early in such cases and print the expected truncation marker "[|null]"
instead.

Feedback OK dlg

Reply via email to