aircrack-ng/aircrack-ng — pull request #14 by NickSampanis (2014-10-02 09:44:19+00:00)
Title: aireplay-ng tcp_test stack overflow

I found a stack overflow at tcp_test function in aireplay-ng. The function tcp_test reads from server a struct which contains the length of the next recv() without proper checking of buffer bounds which leads to buffer overflow