Re: possible underflow in tcpdump/print-gre.c

2023-02-28 Thread Claudio Jeker
On Wed, Feb 22, 2023 at 10:28:45AM +0100, Peter J. Philipp wrote: > On Mon, Feb 20, 2023 at 02:39:45PM +0100, p...@delphinusdns.org wrote: > > >Synopsis: possible underflow in tcpdump/print-gre.c > > >Category: user > > >Environment: > > Syste

Re: possible underflow in tcpdump/print-gre.c

2023-02-22 Thread Peter J. Philipp
On Mon, Feb 20, 2023 at 02:39:45PM +0100, p...@delphinusdns.org wrote: > >Synopsis:possible underflow in tcpdump/print-gre.c > >Category:user > >Environment: > System : OpenBSD 7.2 > Details : OpenBSD 7.2 (GENERIC.MP) #2: Thu

Re: possible underflow in tcpdump/print-gre.c

2023-02-20 Thread Peter J. Philipp
On Mon, Feb 20, 2023 at 04:39:57PM +0100, Peter J. Philipp wrote: > I checked for files with the copyright by jason and found another underflow, > in another file. It seems that this is an idiom of his. This seems > non-exploitable, but it allows one to underflow the length of a STP frame to > RE

Re: possible underflow in tcpdump/print-gre.c

2023-02-20 Thread Peter J. Philipp
I checked for files with the copyright by jason and found another underflow, in another file. It seems that this is an idiom of his. This seems non-exploitable, but it allows one to underflow the length of a STP frame to REALLY big. from tcpdump/print-stp.c: -> if (len < 3)

possible underflow in tcpdump/print-gre.c

2023-02-20 Thread pjp
>Synopsis: possible underflow in tcpdump/print-gre.c >Category: user >Environment: System : OpenBSD 7.2 Details : OpenBSD 7.2 (GENERIC.MP) #2: Thu Nov 24 23:53:03 MST 2022 r...@syspatch-72-arm64.openbsd.org:/usr/src/sys/a