tree aea292ef6dab658197d1df6c9a5bf3f3925013ad
parent 61ab0301606053192f45c188bc48afc837518770
author Denis Ovsienko <infrastation@yandex.ru> 1317028682 +0400
committer Denis Ovsienko <infrastation@yandex.ru> 1317048414 +0400

ospfd: CVE-2011-3325 part 2 (OSPF pkt type segv)

This vulnerability (CERT-FI #514838) was reported by CROSS project.

The error is reproducible only when ospfd debugging is enabled:
  * debug ospf packet all
  * debug ospf zebra
When incoming packet header type field is set to 0x0a, ospfd will crash.

* ospf_packet.c
  * ospf_verify_header(): add type field check
  * ospf_read(): perform input checks early