Skip to content

Commit

Permalink
MFC r352550: Fix invalid handling of ASCONF chunks
Browse files Browse the repository at this point in the history
Fix the handling of invalid parameters in ASCONF chunks.
Thanks to Mark Wodrich from Google for reproting the issue in
sctplab/usrsctp#376
for the userland stack.
  • Loading branch information
tuexen committed May 7, 2020
1 parent 7414007 commit a4f9f9b
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions sys/netinet/sctp_asconf.c
Original file line number Diff line number Diff line change
Expand Up @@ -701,6 +701,7 @@ sctp_handle_asconf(struct mbuf *m, unsigned int offset,
if (param_length <= sizeof(struct sctp_paramhdr)) {
SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length);
sctp_m_freem(m_ack);
return;
}
/* get the entire parameter */
aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
Expand Down

0 comments on commit a4f9f9b

Please sign in to comment.