That is microseconds should be positive
//loop over packets
r = pcap_next_ex(pkts, &header, &pkt);
p = PacketGetFromAlloc();
- if (r <= 0 || header->ts.tv_sec >= INT_MAX - 3600) {
+ if (r <= 0 || header->ts.tv_sec >= INT_MAX - 3600 || header->ts.tv_usec < 0) {
goto bail;
}
p->ts.tv_sec = header->ts.tv_sec;
}
}
r = pcap_next_ex(pkts, &header, &pkt);
- if (r <= 0 || header->ts.tv_sec >= INT_MAX - 3600) {
+ if (r <= 0 || header->ts.tv_sec >= INT_MAX - 3600 || header->ts.tv_usec < 0) {
goto bail;
}
PacketRecycle(p);