diff options
| author | Donald Sharp <donaldsharp72@gmail.com> | 2024-06-01 10:04:10 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-06-01 10:04:10 -0400 |
| commit | bf5ee727eb7e07606e80570d72f741b394f510c6 (patch) | |
| tree | ff3baca19fe6c3c49789c38d2595b50ee5f1dd23 | |
| parent | 2c30c2650f085dd7c0842b2e631838db6188c6c7 (diff) | |
| parent | 522c274f747c96d2daf8a0b3769e38cd06801ace (diff) | |
Merge pull request #16137 from FRRouting/mergify/bp/stable/8.5/pr-16111
ospf6d: Prevent heap-buffer-overflow with unknown type (backport #16111)
| -rw-r--r-- | ospf6d/ospf6_gr_helper.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ospf6d/ospf6_gr_helper.c b/ospf6d/ospf6_gr_helper.c index 41ebf83a06..5a20dece42 100644 --- a/ospf6d/ospf6_gr_helper.c +++ b/ospf6d/ospf6_gr_helper.c @@ -193,6 +193,7 @@ static int ospf6_extract_grace_lsa_fields(struct ospf6_lsa *lsa, return OSPF6_FAILURE; break; default: + sum += TLV_SIZE(tlvh); if (IS_DEBUG_OSPF6_GR) zlog_debug("%s, Ignoring unknown TLV type:%d", __func__, ntohs(tlvh->type)); |