From Jeff Morriss:

H223: Buildbot crash output: fuzz-2012-01-25-22599.pcap

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6768

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@41148 f5534014-38df-0310-8fa8-9805f1628bb7

diff --git a/epan/dissectors/packet-h223.c b/epan/dissectors/packet-h223.c
index c71f6bb6dab5ef3ea0b23a2e30f063ea7ebd056e..5f24bd5240fc93326ec32324744910a56252290b 100644 (file)
--- a/epan/dissectors/packet-h223.c
+++ b/epan/dissectors/packet-h223.c
@@ -825,14 +825,14 @@ dissect_mux_sdu_fragment(tvbuff_t *volatile next_tvb, packet_info *pinfo,
 static guint32
 mux_element_sublist_size( h223_mux_element* me )
 {
-    h223_mux_element *current_me = me;
+    h223_mux_element *current_me = me->next;
     guint32 length = 0;
     while ( current_me ) {
-        current_me = current_me->next;
         if ( current_me->sublist )
             length += current_me->repeat_count * mux_element_sublist_size( current_me->sublist );
         else
             length += current_me->repeat_count;
+        current_me = current_me->next;
     }
     if ( length == 0 ) { /* should never happen, but to avoid infinite loops... */
         DISSECTOR_ASSERT_NOT_REACHED();