Guy Harris b20e1639db CVE-2017-13026/IS-IS: Clean up processing of subTLVs. ...

Add bounds checks, do a common check to make sure we captured the entire
subTLV, add checks to make sure the subTLV fits within the TLV.

This fixes a buffer over-read discovered by Bhargava Shastry,
SecT/TU Berlin.

Add tests using the capture files supplied by the reporter(s), modified
so the capture files won't be rejected as an invalid capture.

Update existing tests for changes to IS-IS dissector.

2017-09-13 12:25:44 +01:00

323 B

Raw History

View Raw