[Snort-devel] [ snort-Bugs-959788 ] Incorrect level of indirection in Stream4InitReassembler

SourceForge.net noreply at ...12...
Tue Jun 1 06:53:03 EDT 2004


Bugs item #959788, was opened at 2004-05-24 23:31
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=959788&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: NN Poster (nnposter)
Assigned to: Nobody/Anonymous (nobody)
Summary: Incorrect level of indirection in Stream4InitReassembler

Initial Comment:
Preprocessor stream4 in snort 2.1.2 contains a bug in a 
pointer level of indirection when parsing configuration 
options "ports" and "emergency_ports" for 
stream4_reassemble. The attached minimal patch 
rectifies the issue.

As a side note, it is questionable if "memset" is really 
appropriate here. A simple "for" loop would be more 
robust from a maintainability point of view.

            for(j = 0;j<65535;j++)
            {
                s4data.assemble_ports[j] = 1;
            }

            for(j = 0;j<65535;j++)
            {
                s4data.emergency_ports[j] = 1;
            }


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=959788&group_id=3357




More information about the Snort-devel mailing list