https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13712

Pascal Quantin <pascal.quan...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pascal.quan...@gmail.com

--- Comment #3 from Pascal Quantin <pascal.quan...@gmail.com> ---
On top of doing bound checks (and not only num_items > 0) I guess it would be a
good thing to move num_items in actx->private_data as what has been done in
other ASN.1 based dissectors to avoid global variables not properly
reinitialized.

BTW (not related to this bug) what about adding a --enable_ubsan (for autofoo)
/ ENABLE_UBSAN (for CMake) to ease the addition of -fsanitize=undefined
compilation flag (is this the one you are using, or are you selecting sub
option?)?

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to