Go to file
Paul Jakma 6e4ab12f15 [bgpd] Bug #354: Take care to keep reads of MP_(UN)REACH_NLRI in bounds
2007-04-08 Paul Jakma <paul.jakma@sun.com>

	* bgp_attr.c: (general) Bug #354: parsing of MP_REACH_NLRI and
	  MP_UNREACH_NLRI does not take sufficient care to ensure reads
	  from stream buffer stay in-bounds. Hence bgpd may attempt to read
	  beyond end of stream, if given a crafted packet. As it uses the
	  stream access methods to do so, this will typically result in
	  assert() being hit in stream.c. Where code is compiled without
	  assert() enabled, result is unknown.
	  (struct message attr_str) should be static.
	  (bgp_mp_reach_parse) Carefully check length remaining in stream
	  against amount desired to read from stream, prior to each read,
	  particularly where lengths are conditional on data obtained from
	  stream - using STREAM_READABLE.
	  Remove code to parse SNPA-number, it's a defunct field and changed
	  to a fixed size in latest BGP MP update RFC - log warning if
	  SNPA-number is not 0.
	  (bgp_mp_unreach_parse) Check withdraw_length carefully against
	  STREAM_READABLE.
	  (bgp_attr_parse) If attribute-parser function returns error, log
	  warning.
	  Log attribute type on mismatch.
2007-04-10 19:36:48 +00:00
bgpd [bgpd] Bug #354: Take care to keep reads of MP_(UN)REACH_NLRI in bounds 2007-04-10 19:36:48 +00:00
doc [doc] Makefile VPATH patch 2007-03-21 21:03:44 +00:00
guile - Add .arch-ids and .arch-inventory to cvsignore, to allow one to use arch 2004-11-02 18:59:49 +00:00
init CVS ignore Linux NFS silly-delete .nfs* files 2004-06-06 15:25:35 +00:00
isisd [isisd] Fix compiler warnings and allow v4-only compilation 2006-12-08 01:09:50 +00:00
lib [zebra] Bug #351: Don't redistribute routes to ipv4 link-local prefixes 2007-04-10 19:24:45 +00:00
m4 remove crufty m4 files from 2004. With the files, autoheader (2.61) 2007-02-03 01:07:01 +00:00
ospf6d [ospf6d] Bug 322: ospf6d show ipv6 neighbour showing wrong times 2007-03-08 17:50:01 +00:00
ospfclient [ospfclient] add static qualifier 2005-11-24 12:40:39 +00:00
ospfd [ospfd] Bug #330 regression: failure to calculate routes through networks 2007-03-23 11:19:08 +00:00
pkgsrc - Add .arch-ids and .arch-inventory to cvsignore, to allow one to use arch 2004-11-02 18:59:49 +00:00
ports - Add .arch-ids and .arch-inventory to cvsignore, to allow one to use arch 2004-11-02 18:59:49 +00:00
redhat [redhat quagga.spec] Detect fedora release automatically 2006-06-15 22:31:39 +00:00
ripd [ripd] Fix "show ip rip status" display of time until next update 2007-03-21 18:57:38 +00:00
ripngd [daemon startup] Add --dry-run/-C argument to daemons, to check config file syntax 2006-10-15 23:35:57 +00:00
solaris [solaris] Add licence boilerplate to files for clarity 2007-02-22 17:55:20 +00:00
tests [tests] update heavywq for workqueue api changes 2006-08-27 06:53:24 +00:00
tools - Add .arch-ids and .arch-inventory to cvsignore, to allow one to use arch 2004-11-02 18:59:49 +00:00
vtysh [daemon startup] Add --dry-run/-C argument to daemons, to check config file syntax 2006-10-15 23:35:57 +00:00
watchquagga 2005-02-17 Andrew J. Schorr <ajschorr@alumni.princeton.edu> 2005-02-17 20:11:58 +00:00
zebra [zebra] Retain configured IPv4 address upon removal by kernel 2007-04-10 19:30:20 +00:00
.cvsignore Ignore <dist tarball>.asc - i always seem to have one hanging around from 2005-01-12 23:49:05 +00:00
AUTHORS Initial revision 2002-12-13 20:15:29 +00:00
bootstrap.sh autoreconf -i 2007-02-06 19:28:28 +00:00
ChangeLog use generic sed test so this works on autoconf 2.59 2007-02-06 20:10:35 +00:00
configure.ac use generic sed test so this works on autoconf 2.59 2007-02-06 20:10:35 +00:00
COPYING Initial revision 2002-12-13 20:15:29 +00:00
COPYING.LIB Initial revision 2002-12-13 20:15:29 +00:00
HACKING 2005-11-10 Paul Jakma <paul.jakma@sun.com> 2005-11-10 10:21:19 +00:00
INSTALL.quagga.txt de-support NetBSD 1.6, and note that FreeBSD 4 is on thin ice. 2007-02-06 19:56:31 +00:00
Makefile.am 2005-08-13 Paul Jakma <paul@jakma.org> 2005-08-13 13:42:38 +00:00
mkinstalldirs Revert to zebra.org automake files 2003-02-17 23:54:05 +00:00
NEWS 2005-11-11 Paul Jakma <paul.jakma@sun.com> 2005-11-11 10:28:59 +00:00
README 2004-11-12 Paul Jakma <paul@dishone.st> 2004-11-12 10:30:21 +00:00
README.NetBSD use bootstrap.sh 2007-02-02 17:03:03 +00:00
REPORTING-BUGS Zebra -> Quagga and reformatting. 2004-02-20 20:33:43 +00:00
SERVICES 2607/tcp is already used by ospfapi. 2003-12-23 10:42:45 +00:00
stamp-h.in Initial revision 2002-12-13 20:15:29 +00:00
TODO [TODO] Note MED functionality we should implement 2006-03-30 14:36:23 +00:00
update-autotools * README.NetBSD: use update-autotools instead of autoreconf 2007-02-02 16:52:38 +00:00

Quagga is free software that manages various IPv4 and IPv6 routing
protocols.

Currently Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1,
RIPv2, and RIPng as well as very early support for IS-IS.
  
See the file INSTALL.quagga.txt for building and installation instructions.
  
See the file REPORTING-BUGS to report bugs.
  
Quagga is free software. See the file COPYING for copying conditions.