| commit | 0c46638122f10019a12ae9668aec91691cf2e017 | [log] [tgz] |
|---|---|---|
| author | Paul Jakma <paul@quagga.net> | Sun Dec 05 17:17:26 2010 +0000 |
| committer | Paul Jakma <paul@quagga.net> | Mon Mar 21 13:50:56 2011 +0000 |
| tree | 1302073e844ff46061ebb938bcd218ed9fbb96bf | |
| parent | 8f228de7b3f9d6f641c75b27ac7ac6e5862cf804 [diff] |
bgpd/security: CVE-2010-1674 Fix crash due to extended-community parser error * bgp_attr.c: (bgp_attr_ext_communities) Certain extended-community attrs can leave attr->flag indicating ext-community is present, even though no extended-community object has been attached to the attr structure. Thus a null-pointer dereference can occur later. (bgp_attr_community) No bug fixed here, but tidy up flow so it has same form as previous. Problem and fix thanks to anonymous reporter.