4 Commits

Author	SHA1	Message	Date
Francois-Xavier Le Bail	018b2b8c96	Use UTC/GMT time when building/checking tests files ... This will avoid some differences when checking in different time zones. We now run the tests without the '-t' option. This will allow to get problems/changes in time printing functions. Update the output of the tests accordingly. Moreover: Add the '-#' option to better identify a packet when there is a difference in output.	2018-08-09 09:23:07 +02:00
Francois-Xavier Le Bail	ba8936b39b	Print truncations with nd_print_trunc() instead of tstr[] strings ... Remove the tstr[] strings. Update the output of some tests accordingly. Moreover: Add or update some ndo_protocol fields.	2018-05-04 13:47:49 +02:00
Francois-Xavier Le Bail	f253e11009	Add a sanity check on packet header length ... The packet length must be <= MAXIMUM_SNAPLEN. Currently, there is no D-Bus printer, thus no need for a bigger length. Now a pachet is valid if: capture length != 0, packet length != 0, capture length <= MAXIMUM_SNAPLEN, packet length <= MAXIMUM_SNAPLEN, packet length >= capture length. Moreover: Fix the packet header lengths of some fuzzed pcap files: If the lengths are > MAXIMUM_SNAPLEN, set them to MAXIMUM_SNAPLEN. Thus they will be always usable with this new sanity check.	2018-02-07 18:48:49 +01:00
Denis Ovsienko	eec1624f7b	CVE-2017-5483/SNMP: improve ASN.1 bounds checks ... Kamil Frankowicz had found that truncated BE_STR and BE_SEQ ASN.1 elements could lead to an overread, from the source code it looked like other ids could have this problem too. Move the checks introduced in commit 72e501f out of the switch blocks to cover all ids by default. This fixes GH#559 and GH#566.	2017-01-18 09:16:41 +01:00