| commit | bf83fa25f1bddec6f09ad879cba5e975a3ae5495 | [log] [tgz] |
|---|---|---|
| author | Paul Jakma <paul.jakma@hpe.com> | Tue Feb 09 15:23:03 2016 +0000 |
| committer | Paul Jakma <paul.jakma@hpe.com> | Tue Mar 08 17:53:22 2016 +0000 |
| tree | a01a0137a4193d2d33d61bb43c113afef3e421a6 | |
| parent | 2db962760426ddb9e266f9a4bc0b274584c819cc [diff] |
lib: Check prefix length from zebra is sensible * zclient.c: prefix length on router-id and interface address add messages not sanity checked. fix. * */*_zebra.c: Prefix length on zebra route read was not checked, and clients use it to write to storage. An evil zebra could overflow client structures by sending overly long prefixlen. Prompted by discussions with: Donald Sharp <sharpd@cumulusnetworks.com>