]> git.puffer.fish Git - mirror/frr.git/commit
isisd: fix crash when reading asla 16783/head
authorLouis Scalbert <louis.scalbert@6wind.com>
Mon, 2 Sep 2024 08:26:57 +0000 (10:26 +0200)
committerMergify <37929162+mergify[bot]@users.noreply.github.com>
Tue, 10 Sep 2024 14:49:45 +0000 (14:49 +0000)
commitef6d74d6e3c6df03bdc2a3a454da6f671230d8f6
tree1a54c89151672979a2b900ef03edf16569fb5828
parentb40447ca8ce7708b40639c77fbfa5f683fdc45a6
isisd: fix crash when reading asla

isisd is crashing when reading a ASLA sub-TLV with Application
Identifier Bit Mask length greater than 1 octet.

Set a limit of 8 bytes in accordance with RFC9479 and check that the
received value does not exceed the limit.

Reported-by: Iggy Frankovic <iggyfran@amazon.com>
Link: https://www.rfc-editor.org/rfc/rfc9479.html#name-application-identifier-bit-
Fixes: 5749ac83a8 ("isisd: add ASLA support")
Signed-off-by: Louis Scalbert <louis.scalbert@6wind.com>
(cherry picked from commit f1bc6c5d81e8cc0d31ee61abb295193f30db4f5a)
isisd/isis_tlvs.c
isisd/isis_tlvs.h