]> git.puffer.fish Git - mirror/frr.git/commit
isisd: fix crash when reading asla 16718/head
authorLouis Scalbert <louis.scalbert@6wind.com>
Mon, 2 Sep 2024 08:26:57 +0000 (10:26 +0200)
committerLouis Scalbert <louis.scalbert@6wind.com>
Tue, 3 Sep 2024 15:30:41 +0000 (17:30 +0200)
commitf1bc6c5d81e8cc0d31ee61abb295193f30db4f5a
tree7a3e662681cab765c8d24fabaaa68801aa62bbe4
parent745cd3e6bf298da16379088e138e33aeb0ee8f52
isisd: fix crash when reading asla

isisd is crashing when reading a ASLA sub-TLV with Application
Identifier Bit Mask length greater than 1 octet.

Set a limit of 8 bytes in accordance with RFC9479 and check that the
received value does not exceed the limit.

Reported-by: Iggy Frankovic <iggyfran@amazon.com>
Link: https://www.rfc-editor.org/rfc/rfc9479.html#name-application-identifier-bit-
Fixes: 5749ac83a8 ("isisd: add ASLA support")
Signed-off-by: Louis Scalbert <louis.scalbert@6wind.com>
isisd/isis_tlvs.c
isisd/isis_tlvs.h