]> git.proxmox.com Git - mirror_edk2.git/commit
NetworkPkg/Ip6Dxe: Improve Neightbor Discovery message validation.
authorMaciej Rabeda <maciej.rabeda@linux.intel.com>
Mon, 2 Mar 2020 12:25:20 +0000 (13:25 +0100)
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Mon, 30 Mar 2020 13:13:29 +0000 (13:13 +0000)
commit9c20342eed70ec99ec50cd73cb81804299f05403
tree53858f07cfa8eb6dbb59738d537bfd7111e91736
parent3000c2963db319d055f474c394b062af910bbb2f
NetworkPkg/Ip6Dxe: Improve Neightbor Discovery message validation.

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2174

Problem has been identified with Ip6ProcessRouterAdvertise() when
Router Advertise packet contains options with malicious/invalid
'Length' field. This can lead to platform entering infinite loop
when processing options from that packet.

Cc: Jiaxin Wu <jiaxin.wu@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>
Signed-off-by: Maciej Rabeda <maciej.rabeda@linux.intel.com>
Reviewed-by: Siyuan Fu <siyuan.fu@intel.com>
NetworkPkg/Ip6Dxe/Ip6Nd.c
NetworkPkg/Ip6Dxe/Ip6Nd.h
NetworkPkg/Ip6Dxe/Ip6Option.c