]> git.puffer.fish Git - matthieu/frr.git/commit
isisd: fix crash when reading asla
authorLouis Scalbert <louis.scalbert@6wind.com>
Mon, 2 Sep 2024 08:26:57 +0000 (10:26 +0200)
committerMergify <37929162+mergify[bot]@users.noreply.github.com>
Tue, 10 Sep 2024 14:50:59 +0000 (14:50 +0000)
commit4a1bfe096cb2abb9eb738cd0511d7a2d3f62dbd3
treef40a12bd5fc48f20dd3e22a8de77b3e4df08c120
parentef60abb167605783e2a4802e3851df067412a3c2
isisd: fix crash when reading asla

isisd is crashing when reading a ASLA sub-TLV with Application
Identifier Bit Mask length greater than 1 octet.

Set a limit of 8 bytes in accordance with RFC9479 and check that the
received value does not exceed the limit.

Reported-by: Iggy Frankovic <iggyfran@amazon.com>
Link: https://www.rfc-editor.org/rfc/rfc9479.html#name-application-identifier-bit-
Fixes: 5749ac83a8 ("isisd: add ASLA support")
Signed-off-by: Louis Scalbert <louis.scalbert@6wind.com>
(cherry picked from commit f1bc6c5d81e8cc0d31ee61abb295193f30db4f5a)
isisd/isis_tlvs.c
isisd/isis_tlvs.h