tree 6aceeb8772c8ba088b387d7fdcdc771899788fce
parent 3d3380d4fda43924171bc0866746c85634952c99
author Denis Ovsienko <infrastation@yandex.ru> 1317028682 +0400
committer Denis Ovsienko <infrastation@yandex.ru> 1317048019 +0400

ospfd: CVE-2011-3325 part 2 (OSPF pkt type segv)

This vulnerability (CERT-FI #514838) was reported by CROSS project.

The error is reproducible only when ospfd debugging is enabled:
  * debug ospf packet all
  * debug ospf zebra
When incoming packet header type field is set to 0x0a, ospfd will crash.

* ospf_packet.c
  * ospf_verify_header(): add type field check
  * ospf_read(): perform input checks early