Project

General

Profile

Actions

Bug #7548

closed

dcerpc: avoid integer underflow

Added by Philippe Antoine 17 days ago. Updated 6 days ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

in case a fragment has a length lesser than DCERPC_HDR_LEN

Fixes: 9daf8528b72c ("dcerpc: tidy up code"), no need to backport

We should also set en event for fraglen < DCERPC_HDR_LEN but that seems a bigger work


Related issues 1 (1 open0 closed)

Copied from Suricata - Bug #7254: dcerpc: parser does not support multiple PDUsAssignedShivani BhardwajActions
Actions #1

Updated by Philippe Antoine 17 days ago

  • Copied from Bug #7254: dcerpc: parser does not support multiple PDUs added
Actions #2

Updated by Philippe Antoine 17 days ago

  • Status changed from New to In Review
Actions #3

Updated by Philippe Antoine 6 days ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF