proxmox-mirrors/mirror_frr
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_frr synced 2025-07-27 10:04:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #12891 from FRRouting/mergify/bp/dev/8.5/pr-12884

Browse Source 
bgpd: Flowspec overflow issue (backport #12884)
This commit is contained in:
Donatas Abraitis 2023-02-24 15:42:10 +02:00 committed by GitHub
commit 9a72aeeb04
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
bgpd/bgp_flowspec.c
View File

@ -140,6 +140,13 @@ int bgp_nlri_parse_flowspec(struct peer *peer, struct attr *attr,
psize); psize);
return BGP_NLRI_PARSE_ERROR_PACKET_OVERFLOW; return BGP_NLRI_PARSE_ERROR_PACKET_OVERFLOW;
} }
if (psize == 0) {
flog_err(EC_BGP_FLOWSPEC_PACKET,
"Flowspec NLRI length 0 which makes no sense");
return BGP_NLRI_PARSE_ERROR_PACKET_OVERFLOW;
}
if (bgp_fs_nlri_validate(pnt, psize, afi) < 0) { if (bgp_fs_nlri_validate(pnt, psize, afi) < 0) {
flog_err( flog_err(
EC_BGP_FLOWSPEC_PACKET, EC_BGP_FLOWSPEC_PACKET,