diff options
| author | paul <paul> | 2007-09-07 14:24:55 +0000 |
|---|---|---|
| committer | paul <paul> | 2007-09-07 14:24:55 +0000 |
| commit | 311d971c4866f25c628fe298faf8b87e604ff5e5 (patch) | |
| tree | 6d6a5b9317756daad387c86b3c6f0759912cbdb4 /zebra/kernel_socket.c | |
| parent | e8eb297f83408c02fbe4f193f0da4b16a83bb26a (diff) | |
| download | quagga-311d971c4866f25c628fe298faf8b87e604ff5e5.tar.bz2 quagga-311d971c4866f25c628fe298faf8b87e604ff5e5.tar.xz | |
[bgpd] low-impact DoS: crash on malformed community with debug set
2007-09-07 Paul Jakma <paul.jakma@sun.com>
* (general) bgpd can be made crash by remote peers if debug
bgp updates is set, due to NULL pointer dereference.
Reported by "Mu Security Research Team",
<security@musecurity.com>.
* bgp_attr.c: (bgp_attr_community) If community length is 0,
don't set the community-present attribute bit, just return
early.
* bgp_debug.c: (community_str,community_com2str) Check com
pointer before dereferencing.
Diffstat (limited to 'zebra/kernel_socket.c')
0 files changed, 0 insertions, 0 deletions