Ettercap/ettercap — pull request #142 by jacob-baines (2013-03-24 00:44:12+00:00)
Title: Fixed Two Parsing Errors

Two parsing errors exist in ec_http.c. The first was using && where || should have been used (begin_comment was not found OR begin_comment + 1 >= end). The second was checking for comment_begin == NULL when we should check comment_end.

Not checking if comment_end is kinda a big deal. If the comment is malformed then an infinite loop can occur. This can be recreated with: https://www.wireshark.org/download/automated/captures/fuzz-2006-08-26-27284.pcap