commit 948b6bef7f9cf841a98fe3ea40419696500c8c4c
author David Lamparter <equinox@opensourcerouting.org> Tue May 08 06:27:04 2012 +0200
committer David Lamparter <equinox@opensourcerouting.org> Thu Oct 25 10:15:59 2012 -0700
tree 9dbdadff242010472e298b624e20e52bd5625328
parent 0fece074e8c9e282ae2cecf9a0a79dc6c930cfb1

isisd: pull up invalid prefix assert()

processing invalid prefixes causes isisd to assert() or otherwise
misbehave in ip_masklen/apply_mask.  pull up the assert() to indicate
better there's broken data in isisd's LSDB.

  * isisd/isis_spf.c: assert() prefix lengths

Signed-off-by: David Lamparter <equinox@opensourcerouting.org>

isisd/isis_spf.c

diff --git a/isisd/isis_spf.c b/isisd/isis_spf.c
index 198104a..eff7c47 100644
--- a/isisd/isis_spf.c
+++ b/isisd/isis_spf.c
@@ -813,6 +813,8 @@
     for (ALL_LIST_ELEMENTS_RO (lsp->tlv_data.te_ipv4_reachs,
                                node, te_ipv4_reach))
     {
+      assert ((te_ipv4_reach->control & 0x3F) <= IPV4_MAX_BITLEN);
+
       dist = cost + ntohl (te_ipv4_reach->te_metric);
       vtype = VTYPE_IPREACH_TE;
       prefix.u.prefix4 = newprefix2inaddr (&te_ipv4_reach->prefix_start,
@@ -829,6 +831,8 @@
     prefix.family = AF_INET6;
     for (ALL_LIST_ELEMENTS_RO (lsp->tlv_data.ipv6_reachs, node, ip6reach))
     {
+      assert (ip6reach->prefix_len <= IPV6_MAX_BITLEN);
+
       dist = cost + ip6reach->metric;
       vtype = (ip6reach->control_info & CTRL_INFO_DISTRIBUTION) ?
         VTYPE_IP6REACH_EXTERNAL : VTYPE_IP6REACH_INTERNAL;