mirrors/tcpdump
0
0
Fork 0
mirror of https://github.com/the-tcpdump-group/tcpdump.git synced 2024-11-23 18:14:29 +08:00
Code Issues Packages Projects Releases Wiki Activity
e3faa0c743
tcpdump/tests/isis_stlv_asan.out

24 lines
1.1 KiB
Plaintext
Raw Normal View History

Report 32-bit timestamps with uppermost bit set as "Error converting time" This is an update to packet header timestamps printing based on Guy Harris's proposal. Theses timestamps are outside the 1970-2038 range; This happens on some fuzzed captures. This will allow to have the same printing on Windows and UN*X. Update needed before 2038.
2018-08-10 04:05:05 +08:00
1 [Error converting time] UI 22! IS-IS, length 262139
CVE-2017-13026/IS-IS: Clean up processing of subTLVs. Add bounds checks, do a common check to make sure we captured the entire subTLV, add checks to make sure the subTLV fits within the TLV. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s), modified so the capture files won't be rejected as an invalid capture. Update existing tests for changes to IS-IS dissector.
2017-03-23 01:59:47 +08:00
L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
source-id: fed0.f90f.58af, holding time: 34047s, Flags: [unknown circuit type 0x00]
lan-id: 0105.0088.a201.00, Priority: 65, PDU length: 4096
IS Reachability TLV #2, length: 12
bogus virtual flag 0x07
IS Neighbor: 0100.1001.9de0.00, Default Metric: 34, Internal
Delay Metric: 5, Internal
Error Metric: 27, Internal
unknown TLV #254, length: 3
0x0000: 05f5 20
unknown TLV #32, length: 32
0x0000: 2020 2020 2020 2020 2020 202d 2020 2020
0x0010: 2020 2020 2020 2020 2020 03e8 2020 2020
unknown TLV #32, length: 32
0x0000: 2020 2020 2020 2020 2020 207f 0020 2020
0x0010: 2026 2020 2020 2020 2020 2020 2020 8f8f
Multi-Topology-Aware Port Capability TLV #143, length: 143
RES: 8, MTID(s): 3983
Clean up TLV processing. Do more checks for running past the TLV or subTLV length. For errors where we go past the TLV or subTLV length, report that as a separate error from just "ran past the end of the packet". When looping over TLVs or subTLVs, loop as long as there's data available and, if there isn't *enough* data available within the TLV or subTLV, report that as a "ran past the end of the TLV/subTLV" error. In isis_print_ext_is_reach(), correctly calculate the number of bytes we process - that amount is smaller for the Alias TLV than for other TLVs, as the Alias TLV doesn't have a Metric field.
2019-05-14 16:23:24 +08:00
unknown subTLV #143, length: 143 (> containing TLV length)
CVE-2017-13026/IS-IS: Clean up processing of subTLVs. Add bounds checks, do a common check to make sure we captured the entire subTLV, add checks to make sure the subTLV fits within the TLV. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s), modified so the capture files won't be rejected as an invalid capture. Update existing tests for changes to IS-IS dissector.
2017-03-23 01:59:47 +08:00
Multi-Topology-Aware Port Capability TLV #143, length: 143
RES: 8, MTID(s): 3983
Clean up TLV processing. Do more checks for running past the TLV or subTLV length. For errors where we go past the TLV or subTLV length, report that as a separate error from just "ran past the end of the packet". When looping over TLVs or subTLVs, loop as long as there's data available and, if there isn't *enough* data available within the TLV or subTLV, report that as a "ran past the end of the TLV/subTLV" error. In isis_print_ext_is_reach(), correctly calculate the number of bytes we process - that amount is smaller for the Alias TLV than for other TLVs, as the Alias TLV doesn't have a Metric field.
2019-05-14 16:23:24 +08:00
unknown subTLV #143, length: 143 (> containing TLV length) [|isis]
Reference in New Issue Copy Permalink