]> git.puffer.fish Git - mirror/frr.git/commit
bgpd/security: CVE-2010-1674 Fix crash due to extended-community parser error
authorPaul Jakma <paul@quagga.net>
Sun, 5 Dec 2010 17:17:26 +0000 (17:17 +0000)
committerDenis Ovsienko <infrastation@yandex.ru>
Mon, 4 Jul 2011 17:02:00 +0000 (21:02 +0400)
commitfc09716b81e67f2d06dc92ff7bcb1efdf18c4eec
tree0685e19912029d28e8a0731091419e836423f24c
parentf668053f1453d64296db6807101450ad749ba730
bgpd/security: CVE-2010-1674 Fix crash due to extended-community parser error

* bgp_attr.c: (bgp_attr_ext_communities) Certain extended-community attrs
  can leave attr->flag indicating ext-community is present, even though no
  extended-community object has been attached to the attr structure.  Thus a
  null-pointer dereference can occur later.
  (bgp_attr_community) No bug fixed here, but tidy up flow so it has same
  form as previous.

  Problem and fix thanks to anonymous reporter.
(cherry picked from commit 0c46638122f10019a12ae9668aec91691cf2e017)
bgpd/bgp_attr.c