]> git.puffer.fish Git - mirror/frr.git/commit
[bgpd] low-impact DoS: crash on malformed community with debug set
authorPaul Jakma <paul.jakma@sun.com>
Fri, 7 Sep 2007 14:24:55 +0000 (14:24 +0000)
committerPaul Jakma <paul.jakma@sun.com>
Fri, 7 Sep 2007 14:24:55 +0000 (14:24 +0000)
commitb2ceea18074ab8cca894051a3fbc30c312e3acc6
tree3dfc9d1572582ed26cedad37768be9a57a67f5a8
parent882968e0a2fe65db5aff29149c87f6d292a1cd2d
[bgpd] low-impact DoS: crash on malformed community with debug set

2007-09-07 Paul Jakma <paul.jakma@sun.com>

* (general) bgpd can be made crash by remote peers if debug
  bgp updates is set, due to NULL pointer dereference.
  Reported by "Mu Security Research Team",
  <security@musecurity.com>.
* bgp_attr.c: (bgp_attr_community) If community length is 0,
  don't set the community-present attribute bit, just return
  early.
* bgp_debug.c: (community_str,community_com2str) Check com
  pointer before dereferencing.
bgpd/ChangeLog
bgpd/bgp_attr.c
bgpd/bgp_community.c