summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* "if (!TTEST2(x, y)) goto trunc" is just "TCHECK2(x, y)".guy2004-03-241-7/+9
| | | | Add a length check.
* Add length checks.guy2004-03-241-3/+6
|
* Add length checks.guy2004-03-241-20/+32
|
* Add payload length checking.guy2004-03-241-16/+40
|
* Add bounds and option length checking.guy2004-03-241-26/+43
| | | | Use "%u", not "%d", for unsigned values.
* Add bounds checking.guy2004-03-241-1/+2
|
* Add bounds checking.guy2004-03-242-6/+16
|
* Add bounds checking.guy2004-03-241-9/+19
|
* Add bounds checking.guy2004-03-241-1/+2
|
* Add bounds checking.guy2004-03-241-56/+262
|
* Enterprise-specific traps have a generic trap number of 6, not 7; thanksguy2004-03-231-2/+2
| | | | to kin1@sourceforge.net to finding this.
* Propagate from the main branchguy2004-03-201-0/+2
| | | | | | revision 1.10 date: 2004/03/19 21:37:49; author: risso; state: Exp; lines: +2 -0 Added oui.c, print-ap1394.c and print-symantec.c to the Windows project.
* Propagateguy2004-03-201-0/+12
| | | | | | | | revision 1.12 date: 2004/03/19 21:37:49; author: risso; state: Exp; lines: +12 -0 Added oui.c, print-ap1394.c and print-symantec.c to the Windows project. to the 3.8 branch.
* Add support for the "-e" flag, printing the destination and sourceguy2004-03-171-0/+119
| | | | addresses.
* Add support for Apple's IP-over-IEEE 1394 encapsulation.guy2004-03-175-8/+13
|
* From Bill Fenner: add checks to make sure we don't run past the end ofguy2004-03-121-21/+95
| | | | | | | | the captured data in the packet. Have "rawprint()" return a success-or-failure indication and have its callers (if they don't know that it can't fail) print a truncation indication if it fails.
* Pass the length from the payload header to the print routines forguy2004-03-121-70/+74
| | | | | | | | | | | various payload types. Use that in those routines rather than getting the length ourselves (which fixes a case where we were getting it incorrectly, forgetting to "ntohs()" it). In "isakmp_id_print()", if the item length is less than the size of the fixed-length portion of the payload, don't subtract the latter from the former and use it as the length of the variable-length portion, just set the length in question to 0.
* Put a null statement after a label that had no statement after it, toguy2004-03-121-2/+2
| | | | squelch a compiler warning.
* Print unsigned values with %u, not %d.guy2004-03-121-2/+2
|
* From: alex medvedev <alexm@pycckue.org>hannes2004-03-021-1/+5
| | | | | | catch a segfault: option 81 min size should be 4 bytes: http://sunsite.uakom.sk/doc/rfc/bootp-dhcp-option-81
* security patch from jonathan heusser:hannes2004-02-181-1/+5
| | | | | | | | addrtoname.c:getname() does not check its argument. Assuming the argument is e.g. NULL and the function is called leads to a segmentation fault in memcpy(). Which is problematic since it is heavily used, either as getname() or ipaddr_string().
* sync the radius printer to HEAD to fix the recent overflow issueshannes2004-02-064-213/+341
|
* Propagate from the main branchguy2004-01-271-4/+5
| | | | | | | | | | | | | | | | | | revision 1.9 date: 2004/01/27 23:36:59; author: guy; state: Exp; lines: +2 -3 Remove "bpf_dump.o" from the list of things to build - "bpf_dump()" now comes with libpcap. Remove "print-netbios.o" from the list of things to build - it's not used any more. Add "oui.o" to the list of things to build - it *is* used. Remove a backslash from the last entry in the list of things to build. revision 1.8 date: 2004/01/26 14:29:15; author: risso; state: Exp; lines: +3 -1 Added some missing files in order to correctly compile under Cygnus
* Propagate from the main branchguy2004-01-271-1/+6
| | | | | | | | | prevent a call to getnameinfo() under cygnus, which doesn't provide it (although I think it's actually MinGW that doesn't provide it - the check is for __MINGW32__, which I think is defined by MinGW but not Cygwin).
* Propagate Hannes' change from the main branch:guy2004-01-271-7/+1
| | | | remove broken rcsid at EOF
* Update the date.guy2004-01-261-2/+2
|
* Check whether we have too many output files *before* allocating theguy2004-01-261-3/+3
| | | | buffer for the new output file name.
* Adapted from a more extensive change from Chris Cogdonguy2004-01-262-2/+8
| | | | | | | | | <chris@cogdon.org>: check whether the file number for "-C" is too large to fit in the buffer we allocated for the file name. Close the current capture file before trying to allocate the buffer for the new file's name, so that if that allocation fails we've at least written out all of the previous file.
* - bugfix: rework the AS_PATH decoder per draft-ietf-idr-rfc3065bis:hannes2004-01-161-15/+29
| | | | | | | | | CONFED_AS_SET and CONFED_AS_SEQUENCE codepoints have changed; - rework the SEQ and SET display output in accordance with contemporary routing software ( AS ) indicates an CONFED AS SEQUENCE segment { AS } indicates an AS SET segment ({ AS }) indicates an CONFED AS SET segment
* From Gisle Vanem: fix the "-m" case in the argument processing not toguy2004-01-141-1/+2
| | | | fall through to the "-O" case.
* Note that Mac OS X, as one of the BSDs, has SIGINFO; note thatguy2004-01-071-6/+10
| | | | | | | | | | | | | | | | | Digital/Tru64 UNIX has it as well (although the tty(7) man page doesn't mention VSTATUS - stty(1) mentions "status", however, and signal(4) mentions SIGINFO, and some Tru64->HP-UX transition pages mention SIGINFO as a feature available in Tru64 but not HP-UX). Note that on some systems (e.g., Mac OS X), you might have to set your "status" character as it defaults, on those systems, to "not set". Get rid of the reference to "traffic(1C)" (it's not referred to in the man page, and about the only connection it has with tcpdump is that they both watch network traffic; traffic(1C) is a SunOS 4.x-ism, not present on other platforms), and add a reference to pfconfig(8) for Digital/Tru64 (it *is* referred to, in the section of what privileges you need in order to capture traffic).
* bugfix from Jonathan Heusser <jonny@drugphish.ch>hannes2004-01-073-3/+12
| | | | | | | | | | | The first critical piece of code is found in print-isakmp.c:332. The function rawprint() does not check its arguments thus it's easy for an attacker to pass a big 'len' or a bogus 'loc' leading to a segmentation fault in the for loop. The second bug is located in print-radius.c:471. The for loop of print_attr_string() is written in an unsafe manner. 'length' and 'data' should be checked.
* - pass on ident string to hex_print()hannes2003-12-297-80/+47
| | | | | | | | | | | | - pass on ident string to ascii_print() - pave the way for eliminating print_unknown_data() and subsequent hex_print() replacement - clean up the default_print() related functions: - call always into print_ascii() b/c just hexdump data is uninteresting; hex-offsets plus ascii representation is what most people are looking for - remove default_print_unaligned() as it is now obsolete
* add tokentable llc_values[], remove SNAP printing beyond vflaghannes2003-12-291-4/+21
|
* Check to make sure the length of an AVP is large enough to include thetcpdump_3_8rel1tcpdump-3.8.1guy2003-12-261-3/+12
| | | | AVP header and doesn't go past the remaining length of the packet.
* As per George Bakos' suggestion, only print the ":" separator betweenguy2003-12-201-2/+3
| | | | the flags and the payload if we're printing the payload.
* From George Bakos: only print multi-line output with "-v".guy2003-12-201-23/+23
|
* From George Bakos: send the "reading from" messages to stderr, notguy2003-12-181-3/+4
| | | | stdout, so only output for packets goes to stdout.
* From George Bakos: catch bogus payload lengths even if we have a routineguy2003-12-151-13/+18
| | | | to process the payload type.
* Get rid of a set-but-not-used variable.guy2003-12-151-3/+1
|
* Get rid of an unused variable.guy2003-12-151-3/+1
|
* _U_ is defined by the Makefile; we shouldn't redefine it ourselves.guy2003-12-151-3/+1
|
* When checking to make sure the LSP ID is all present, check the lastguy2003-12-151-2/+2
| | | | byte of the LSP ID, not the first byte past the LSP ID.
* Make the "dlci" variable a u_int, as all the code that refers to itguy2003-12-151-2/+3
| | | | thinks it's unsigned.
* Add in Readme.Win32.guy2003-12-152-1/+3
|
* Add some missing entries, and use tabs on some entries that weren'tguy2003-12-151-4/+5
| | | | using them.
* Get rid of the no-longer-used frame control argument to variousguy2003-12-101-23/+22
| | | | management frame print routines.
* Include "print-enc.c" in the tarball.guy2003-12-011-0/+1
|
* "win32/Src/w32_fzs.c" was removed; remove it from the list of files inguy2003-12-011-1/+0
| | | | the tarball.
* Don't stick an extra "RESERVED" in the printout for unknown managementguy2003-11-271-5/+5
| | | | frame subtypes.
View Lorry Controller Status