On Wed, May 09, 2007 at 02:53:25PM -0400, Kevin A. Noll wrote: > I'm trying to decode a packet that has TLVs at the end of it. One of > the possible TLVs is a "NULL" TLV, which is simply one or more bytes > with the zero value. However, if it's any other kind of TLV, it is > likely to start with a zero and then be followed by another value that > indicates the actual type. > > How do I check for that second byte without reading past the end of > the packet buffer?
Check out the functions with length_remaining in their name in epan/tvbuff.h. The idea is to check to make sure there is another byte before you try to access it. Steve _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
