diff options
| author | David Lamparter <equinox@opensourcerouting.org> | 2025-01-22 11:17:21 +0100 |
|---|---|---|
| committer | David Lamparter <equinox@opensourcerouting.org> | 2025-02-11 09:49:33 +0100 |
| commit | 635f90bad1556395dcfd31dab617a662147d5368 (patch) | |
| tree | a65ed2b459f717689a363289c020996351a03e0e | |
| parent | 54d4153afa6cedc895e0527e9afce0be27a109a4 (diff) | |
zebra: guard against junk in nexthop->rmap_src
rmap_src wasn't initialized, so for IPv4 the unused 12 bytes would
contain whatever junk is on the stack on function entry. Also move
the IPv4 parse before the IPv6 parse so if it's successful we can be
sure the other bytes haven't been touched.
Signed-off-by: David Lamparter <equinox@opensourcerouting.org>
(cherry picked from commit b666ee510eb480da50476b1bbc84bdf8365df95c)
| -rw-r--r-- | zebra/zebra_routemap.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/zebra/zebra_routemap.c b/zebra/zebra_routemap.c index f337b3a752..0f3e79b7cc 100644 --- a/zebra/zebra_routemap.c +++ b/zebra/zebra_routemap.c @@ -1518,10 +1518,11 @@ route_set_src(void *rule, const struct prefix *prefix, void *object) /* set src compilation. */ static void *route_set_src_compile(const char *arg) { - union g_addr src, *psrc; + union g_addr src = {}, *psrc; - if ((inet_pton(AF_INET6, arg, &src.ipv6) == 1) - || (inet_pton(AF_INET, arg, &src.ipv4) == 1)) { + /* IPv4 first, to ensure no garbage in the 12 unused bytes */ + if ((inet_pton(AF_INET, arg, &src.ipv4) == 1) || + (inet_pton(AF_INET6, arg, &src.ipv6) == 1)) { psrc = XMALLOC(MTYPE_ROUTE_MAP_COMPILED, sizeof(union g_addr)); *psrc = src; return psrc; |