]> git.proxmox.com Git - mirror_frr.git/commit
projects / mirror_frr.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0c7b459) | patch
bgpd: fix mplsvpn nlri garbage heap read
authorQuentin Young <qlyoung@nvidia.com>
Thu, 3 Sep 2020 17:22:17 +0000 (13:22 -0400)
committerQuentin Young <qlyoung@nvidia.com>
Thu, 3 Sep 2020 18:06:30 +0000 (14:06 -0400)
commit506dbcc86b44319779616fbc24a295a7d0febb57
tree75fb136468f612537b342ed886dcaea32dcf008btree
parent0c7b459c2ccd71dc13abe9d8cc921a2799346485commit | diff
bgpd: fix mplsvpn nlri garbage heap read

NLRI parsing for mpls vpn was missing several length checks that could
easily result in garbage heap reads past the end of nlri->packet.

Convert the whole function to use stream APIs for automatic bounds
checking...

Signed-off-by: Quentin Young <qlyoung@nvidia.com>
bgpd/bgp_mplsvpn.c diff | blob | blame | history
FRRouting mirror