Jerry/bird
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fixed length check miscalculation in IPv6 receive path.

Browse source
This commit is contained in:
Martin Mares 2003-02-22 10:25:22 +00:00
parent 47f18ac39a
commit 60a72ed49b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
proto/bgp/packets.c
View file

@ -602,7 +602,7 @@ bgp_do_rx_update(struct bgp_conn *conn,
if (len < 1 || (*x != 16 && *x != 32) || len < *x + 2) if (len < 1 || (*x != 16 && *x != 32) || len < *x + 2)
goto bad; goto bad;
memcpy(bgp_attach_attr(&a0->eattrs, bgp_linpool, BA_NEXT_HOP, 16), x+1, 16); memcpy(bgp_attach_attr(&a0->eattrs, bgp_linpool, BA_NEXT_HOP, 16), x+1, 16);
len -= *x + 1; len -= *x + 2;
x += *x + 1; x += *x + 1;
/* Ignore SNPA info */ /* Ignore SNPA info */