Blob Blame History Raw
From 103f16582ee88341a6a610378011781cdc866b0c Mon Sep 17 00:00:00 2001
From: NickSampanis <nicksampanis@gmail.com>
Date: Fri, 17 Oct 2014 17:14:28 +0300
Subject: [PATCH] Fix arbitary length

---
 src/dissectors/ec_dhcp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/dissectors/ec_dhcp.c b/src/dissectors/ec_dhcp.c
index 1ca7d05..c984153 100644
--- a/src/dissectors/ec_dhcp.c
+++ b/src/dissectors/ec_dhcp.c
@@ -256,7 +256,7 @@ FUNC_DECODER(dissector_dhcp)
                 (opt = get_dhcp_option(DHCP_OPT_FQDN, options, end)) != NULL)
             {
                 u_char size = opt[0];
-                if ((opt + size + 2) > end)
+                if ((opt + size + 2) > end || size < 3)
                 {
                     // the +2 accounts for a-rr and ptr-rr
                     return NULL;