diff options
| author | wolfbeast <mcwerewolf@wolfbeast.com> | 2020-03-18 11:11:13 +0100 |
|---|---|---|
| committer | wolfbeast <mcwerewolf@wolfbeast.com> | 2020-03-18 11:11:13 +0100 |
| commit | 22fc2203541d3136b164a0ca138a851167ada760 (patch) | |
| tree | f22be88bc91a0a503f11f4fd23beb06b25c97b6b /netwerk/sctp/src/netinet/sctp_auth.c | |
| parent | 6d504711a01e9be34725f9add22cc7aa311cb14f (diff) | |
| download | UXP-22fc2203541d3136b164a0ca138a851167ada760.tar UXP-22fc2203541d3136b164a0ca138a851167ada760.tar.gz UXP-22fc2203541d3136b164a0ca138a851167ada760.tar.lz UXP-22fc2203541d3136b164a0ca138a851167ada760.tar.xz UXP-22fc2203541d3136b164a0ca138a851167ada760.zip | |
[network] Cherry-pick various sctp lib upstream fixes.
Diffstat (limited to 'netwerk/sctp/src/netinet/sctp_auth.c')
| -rwxr-xr-x | netwerk/sctp/src/netinet/sctp_auth.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/netwerk/sctp/src/netinet/sctp_auth.c b/netwerk/sctp/src/netinet/sctp_auth.c index ee5ca36ce..4e9f7e4cd 100755 --- a/netwerk/sctp/src/netinet/sctp_auth.c +++ b/netwerk/sctp/src/netinet/sctp_auth.c @@ -32,7 +32,7 @@ #ifdef __FreeBSD__ #include <sys/cdefs.h> -__FBSDID("$FreeBSD: head/sys/netinet/sctp_auth.c 271673 2014-09-16 14:20:33Z tuexen $"); +__FBSDID("$FreeBSD: head/sys/netinet/sctp_auth.c 355931 2019-12-20 15:25:08Z tuexen $"); #endif #include <netinet/sctp_os.h> @@ -1450,7 +1450,8 @@ sctp_auth_get_cookie_params(struct sctp_tcb *stcb, struct mbuf *m, ptype = ntohs(phdr->param_type); plen = ntohs(phdr->param_length); - if ((plen == 0) || (offset + plen > length)) + if ((plen < sizeof(struct sctp_paramhdr)) || + (offset + plen > length)) break; if (ptype == SCTP_RANDOM) { |