]> git.puffer.fish Git - mirror/frr.git/commit
nhrpd: fixes duplicate auth extension 16819/head
authorDenys Haryachyy <garyachy@gmail.com>
Thu, 12 Sep 2024 07:28:28 +0000 (07:28 +0000)
committerMergify <37929162+mergify[bot]@users.noreply.github.com>
Fri, 13 Sep 2024 14:52:33 +0000 (14:52 +0000)
commitebe88a053dac1c1d3ca75509f73500eb8a37aa84
tree19673b1a8c6d2d662004290a66981844bd634f7a
parent2af6e7aa0aa2759d4eaadd1049656dbdf9ba5d4d
nhrpd: fixes duplicate auth extension

When an NHRP peer was forwarding a message, it was copying all
extensions from the originally received packet. The authentication
extension must be regenerated hop by hop per RFC2332.
This fix checks for the auth extension when copying extensions
and omits the original packet auth and instead regenerates a new auth extension.

Fix bug #16507

Signed-off-by: Denys Haryachyy <garyachy@gmail.com>
(cherry picked from commit 8e3c278bbcd0ced1d4058cc7a2c9aebdfbc8b651)
nhrpd/nhrp_peer.c