diff options
| author | Anders Broman <anders.broman@ericsson.com> | 2006-03-07 06:15:06 +0000 |
|---|---|---|
| committer | Anders Broman <anders.broman@ericsson.com> | 2006-03-07 06:15:06 +0000 |
| commit | 84b00c55d1cac078d048beeef1ab2d5ebc6d490c (patch) | |
| tree | 503fce728f0fa3612614490681aec95b5d31cb62 /epan/sigcomp-udvm.c | |
| parent | 95b2d64a36ffac8eabcad33fdc834dc770dcd795 (diff) | |
| download | wireshark-84b00c55d1cac078d048beeef1ab2d5ebc6d490c.tar.gz wireshark-84b00c55d1cac078d048beeef1ab2d5ebc6d490c.tar.bz2 wireshark-84b00c55d1cac078d048beeef1ab2d5ebc6d490c.zip | |
Fix a bug reported by coverity.
svn path=/trunk/; revision=17490
Diffstat (limited to 'epan/sigcomp-udvm.c')
| -rw-r--r-- | epan/sigcomp-udvm.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/epan/sigcomp-udvm.c b/epan/sigcomp-udvm.c index dc11c8fc64..8e6a8851f2 100644 --- a/epan/sigcomp-udvm.c +++ b/epan/sigcomp-udvm.c @@ -1100,10 +1100,11 @@ execute_next_instruction: buff[stack_location] = (stack_fill >> 8) & 0x00FF; buff[(stack_location+1) & 0xFFFF] = stack_fill & 0x00FF; + address = (stack_location + stack_fill * 2 + 2) & 0xFFFF; + if (address >= UDVM_MEMORY_SIZE - 1) goto decompression_failure; - address = (stack_location + stack_fill * 2 + 2) & 0xFFFF; value = (buff[address] << 8) | buff[(address+1) & 0xFFFF]; |