Project

General

Profile

Actions
Copy link

Bug #7548

closed

dcerpc: avoid integer underflow

Added by Philippe Antoine 17 days ago. Updated 5 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

in case a fragment has a length lesser than DCERPC_HDR_LEN

Fixes: 9daf8528b72c ("dcerpc: tidy up code"), no need to backport

We should also set en event for fraglen < DCERPC_HDR_LEN but that seems a bigger work

Related issues 1 (1 open — 0 closed)

Copied from Suricata - Bug #7254: dcerpc: parser does not support multiple PDUsAssignedShivani BhardwajActions
Actions
Copy link

Also available in: Atom PDF