tcpdump/tests/isis_stlv_asan-2.out
Guy Harris b20e1639db CVE-2017-13026/IS-IS: Clean up processing of subTLVs.
Add bounds checks, do a common check to make sure we captured the entire
subTLV, add checks to make sure the subTLV fits within the TLV.

This fixes a buffer over-read discovered by Bhargava Shastry,
SecT/TU Berlin.

Add tests using the capture files supplied by the reporter(s), modified
so the capture files won't be rejected as an invalid capture.

Update existing tests for changes to IS-IS dissector.
2017-09-13 12:25:44 +01:00

23 lines
916 B
Plaintext

UI 22! IS-IS, length 469869187
L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
source-id: fed0.f90f.58af, holding time: 34047s, Flags: [unknown circuit type 0x00]
lan-id: 0100.0088.a201.1c, Priority: 65, PDU length: 4096
unknown TLV #0, length: 12
0x0000: 0722 0583 1b01 0010 0505 0505
Area address(es) TLV #1, length: 157
IS Reachability TLV #2, length: 2
bogus virtual flag 0x02
IS Reachability TLV #2, length: 2
bogus virtual flag 0x02
IS Reachability TLV #2, length: 2
bogus virtual flag 0x90
Multi-Topology Capability TLV #144, length: 144
O: 1, RES: 1, MTID(s): 144
unknown subTLV #144, length: 2
unknown subTLV #2, length: 0
unknown subTLV #16, length: 1
unknown subTLV #224, length: 0
unknown subTLV #59, length: 0
unknown subTLV #5, length: 166
[|isis] [|isis]