Re: [Ethereal-dev] Possible problem in packet-smb-common.c [negative length tvb_memcpy()] ?

[Guy Harris <gharris@xxxxxxxxx>]

On Wed, Mar 31, 2004 at 10:46:29AM +0200, Yaniv Kaul wrote:
> Just from reading the code, it seems there's a potential problem of 
> copying a negative sized buffer in get_unicode_or_ascii_string(), and 
> specifically, in:

Yes, that could happen; I've changed "get_unicode_or_ascii_string()" to
treat a negative length as INT_MAX (as a negative length would probably
be a large unsigned integer converted to a signed integer) and fixed
some other problems I noticed while looking at it.