ospfd: catch and report runt LSAs

Signed-off-by: Lou Berger <lberger@labn.net>

diff --git a/ospfd/ospf_packet.c b/ospfd/ospf_packet.c
index 466b5fa2a27cd062553eda548682465950b738d9..8c87a568c0bc38d23737447316325ed6803b8596 100644 (file)
--- a/ospfd/ospf_packet.c
+++ b/ospfd/ospf_packet.c
@@ -1716,6 +1716,12 @@ static struct list *ospf_ls_upd_list_lsa(struct ospf_neighbor *nbr,
                        break;
                }
 
+               if (length < OSPF_LSA_HEADER_SIZE) {
+                       flog_warn(EC_OSPF_PACKET,
+                                 "Link State Update: LSA length too small.");
+                       break;
+               }
+
                /* Validate the LSA's LS checksum. */
                sum = lsah->checksum;
                if (!ospf_lsa_checksum_valid(lsah)) {