Submitter: Guy Harris (g...@alum.mit.edu)
Changed: branch: master-2.2
129e41f by Guy Harris (g...@alum.mit.edu):
Do the maximum block size check in pcap_read_block().
Do it before we even *try* to read the block, so that it's done in one
place rather than having to be done in every routine to handle
particular block types.
The check was missing in the routine to read sysdig event blocks, so if
we got a huge sysdig even block we'd try to allocate a huge amount of
Reviewed-by: Guy Harris <g...@alum.mit.edu>
(cherry picked from commit f73ae69ba917abd34db434b7ead03d4bc0e9c279)
from b1cc8f1 Plug an (unlikely) leak.
adds 129e41f Do the maximum block size check in pcap_read_block().
Summary of changes:
wiretap/pcapng.c | 88 +++++++++-----------------------------------------------
1 file changed, 13 insertions(+), 75 deletions(-)
Sent via: Wireshark-commits mailing list <email@example.com>