]> git.proxmox.com Git - mirror_frr.git/commit
babeld: Do not copy beyond end of data
authorDonald Sharp <sharpd@cumulusnetworks.com>
Mon, 9 Oct 2017 20:36:52 +0000 (16:36 -0400)
committerDonald Sharp <sharpd@cumulusnetworks.com>
Mon, 9 Oct 2017 23:29:09 +0000 (19:29 -0400)
commit01b08f09c553b847ff740590eef6b2aedeafc952
treedfbba1fff06397f9998977072f151f4fed796a9a
parentf4dd8c46200b91fd589cb462739f3aca6b1a766f
babeld: Do not copy beyond end of data

The function really_send_update takes a 'const unsigned char *id'.
and is called with myid(a 8 byte array) and route->src->id(an 8
byte array), but we copy these pointers into
babel_ifp->buffered_id which is a 16 byte array.

Adjust the size of buffered_id to be 8 bytes and fix the copy
to only copy the 8 bytes.

Signed-off-by: Donald Sharp <sharpd@cumulusnetworks.com>
babeld/babel_interface.h
babeld/message.c