proxmox-mirrors/mirror_frr
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_frr synced 2025-08-16 04:50:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

isisd: Prevent direct copy of different size prefix'es

Browse Source 
Memory is allocated for a `struct prefix_ipv6` but
it was directly copied into a `struct prefix` via
direct pointer copy, which leads to a read past
end of memory.  Fix by using prefix_copy

Signed-off-by: Donald Sharp <sharpd@nvidia.com>
This commit is contained in:
Donald Sharp 2022-05-06 21:24:56 -04:00
parent ae6ca0e643
commit 14678bfa0d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
isisd/isis_te.c
View File

@ -909,7 +909,7 @@ static int lsp_to_subnet_cb(const struct prefix *prefix, uint32_t metric,
p.u.prefix6 = std->local6; p.u.prefix6 = std->local6;
} }
if (!std) if (!std)
p = *prefix; prefix_copy(&p, prefix);
else else
te_debug(" |- Adjust prefix %pFX with local address to: %pFX", te_debug(" |- Adjust prefix %pFX with local address to: %pFX",
prefix, &p); prefix, &p);