]> git.puffer.fish Git - mirror/frr.git/commit
bgpd: Flowspec overflow issue 12884/head
authorDonald Sharp <sharpd@nvidia.com>
Thu, 23 Feb 2023 18:29:32 +0000 (13:29 -0500)
committerDonald Sharp <sharpd@nvidia.com>
Thu, 23 Feb 2023 18:29:32 +0000 (13:29 -0500)
commit0b999c886e241c52bd1f7ef0066700e4b618ebb3
tree0fbf7f24bb4831fae5834fd40ee57ceae4a6e266
parent4b0d6b4244aff02be34c5b416b25b7259bf66350
bgpd: Flowspec overflow issue

According to the flowspec RFC 8955 a flowspec nlri is <length, <nlri data>>
Specifying 0 as a length makes BGP get all warm on the inside.  Which
in this case is not a good thing at all.  Prevent warmth, stay cold
on the inside.

Reported-by: Iggy Frankovic <iggyfran@amazon.com>
Signed-off-by: Donald Sharp <sharpd@nvidia.com>
bgpd/bgp_flowspec.c