]> git.puffer.fish Git - matthieu/frr.git/commit
isisd: fix crash when reading asla
authorLouis Scalbert <louis.scalbert@6wind.com>
Mon, 2 Sep 2024 08:26:57 +0000 (10:26 +0200)
committerMergify <37929162+mergify[bot]@users.noreply.github.com>
Tue, 10 Sep 2024 14:49:52 +0000 (14:49 +0000)
commit8b0130aaf45836c99894b7839a6c8c2bedd9f10e
tree910847260efb8230a0e909cb27ea3ce182b5ed14
parent76b0754c53ee06b2cfd7a50c18cbbf363f8bb2af
isisd: fix crash when reading asla

isisd is crashing when reading a ASLA sub-TLV with Application
Identifier Bit Mask length greater than 1 octet.

Set a limit of 8 bytes in accordance with RFC9479 and check that the
received value does not exceed the limit.

Reported-by: Iggy Frankovic <iggyfran@amazon.com>
Link: https://www.rfc-editor.org/rfc/rfc9479.html#name-application-identifier-bit-
Fixes: 5749ac83a8 ("isisd: add ASLA support")
Signed-off-by: Louis Scalbert <louis.scalbert@6wind.com>
(cherry picked from commit f1bc6c5d81e8cc0d31ee61abb295193f30db4f5a)
isisd/isis_tlvs.c
isisd/isis_tlvs.h