(/home/sate/Testcases/c/cve/wireshark-1.2.0/epan/dissectors/packet-h460.c) |
| |
| 1643 | | | dissect_h460_15_ChannelSuspendConfirm(tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) { |
| 1644 | | | offset = dissect_per_sequence(tvb, offset, actx, tree, hf_index, |
| 1645 | [+] | | ett_h460_15_ChannelSuspendConfirm, h460_15_ChannelSuspendConfirm_sequence); |
Event 1:
h460_15_ChannelSuspendConfirm_sequence is passed to dissect_per_sequence() as the seventh argument. - This points to the buffer that will be overrun later.
hide
|
|
 |
| |