From: Timo Teräs <timo.teras@iki.fi>
Date: Sun, 19 Jul 2020 15:07:31 +0000 (+0300)
Subject: nhrpd: change ipsec SA count to 32-bit
X-Git-Tag: base_7.6~66^2~6
X-Git-Url: https://git.puffer.fish/?a=commitdiff_plain;h=6cfd90f353f39e35a249168022366b5cc322ccbd;p=mirror%2Ffrr.git

nhrpd: change ipsec SA count to 32-bit

Under certain misconfigurations, the SA count can be unusually high
and wrap 8-bit counter. That leads to premature free, and crash.
Make the count 32-bit to avoid crash in these rare conditions.

Signed-off-by: Reuben Dowle <reuben.dowle@4rf.com>
---

diff --git a/nhrpd/nhrpd.h b/nhrpd/nhrpd.h
index 80a365a3c3..4ff9734ce6 100644
--- a/nhrpd/nhrpd.h
+++ b/nhrpd/nhrpd.h
@@ -124,7 +124,7 @@ enum nhrp_notify_type {
 
 struct nhrp_vc {
 	struct notifier_list notifier_list;
-	uint8_t ipsec;
+	uint32_t ipsec;
 	uint8_t updating;
 	uint8_t abort_migration;