File tcpdump-CVE-2019-15167.patch of Package tcpdump.17077
Index: tcpdump-4.9.2/print-vrrp.c
===================================================================
--- tcpdump-4.9.2.orig/print-vrrp.c
+++ tcpdump-4.9.2/print-vrrp.c
@@ -152,9 +152,11 @@ vrrp_print(netdissect_options *ndo,
if (version == 3 && ND_TTEST2(bp[0], len)) {
uint16_t cksum = nextproto4_cksum(ndo, (const struct ip *)bp2, bp,
len, len, IPPROTO_VRRP);
- if (cksum)
+ if (cksum) {
+ ND_TCHECK_16BITS(&bp[6]);
ND_PRINT((ndo, ", (bad vrrp cksum %x)",
EXTRACT_16BITS(&bp[6])));
+ }
}
ND_PRINT((ndo, ", addrs"));