Blame SOURCES/wireshark-0021-CVE-19627.patch
|
 |
4a42e1 |
diff --git a/wiretap/vwr.c b/wiretap/vwr.c
|
|
|
4a42e1 |
index 8725ba9c3c..173614ec34 100644
|
|
|
4a42e1 |
--- a/wiretap/vwr.c
|
|
|
4a42e1 |
+++ b/wiretap/vwr.c
|
|
|
4a42e1 |
@@ -2155,9 +2155,10 @@ static gboolean vwr_read_s3_W_rec(vwr_t *vwr, wtap_rec *record,
|
|
|
4a42e1 |
end_time = e_time / NS_IN_US; /* convert to microseconds first */
|
|
|
4a42e1 |
|
|
|
4a42e1 |
/* extract the 32 LSBs of the signature timestamp field */
|
|
|
4a42e1 |
- m_ptr = &(rec[stats_offset+8+12]);
|
|
|
4a42e1 |
+ int m_ptr_offset = stats_offset + 8 + 12;
|
|
|
4a42e1 |
+ m_ptr = rec + m_ptr_offset;
|
|
|
4a42e1 |
pay_off = 42; /* 24 (MAC) + 8 (SNAP) + IP */
|
|
|
4a42e1 |
- sig_off = find_signature(m_ptr, rec_size - 20, pay_off, flow_id, flow_seq);
|
|
|
4a42e1 |
+ sig_off = find_signature(m_ptr, rec_size - m_ptr_offset, pay_off, flow_id, flow_seq);
|
|
|
4a42e1 |
if (m_ptr[sig_off] == 0xdd)
|
|
|
4a42e1 |
sig_ts = get_signature_ts(m_ptr, sig_off, rec_size - vVW510021_W_STATS_TRAILER_LEN);
|
|
|
4a42e1 |
else
|