summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_icmp.c
diff options
context:
space:
mode:
authorjlemon <jlemon@FreeBSD.org>2000-06-02 20:18:38 +0000
committerjlemon <jlemon@FreeBSD.org>2000-06-02 20:18:38 +0000
commitd94fab6e66bc1f43b12c01759d3baaca6e0df5d2 (patch)
tree9ecbf7d7d025e2c48fe1d6759185766c04e0625c /sys/netinet/ip_icmp.c
parent7c8d1a02ff40df8fde524b8406ff5a51ae21e223 (diff)
downloadFreeBSD-src-d94fab6e66bc1f43b12c01759d3baaca6e0df5d2.zip
FreeBSD-src-d94fab6e66bc1f43b12c01759d3baaca6e0df5d2.tar.gz
Add boundary checks against IP options.
Obtained from: OpenBSD
Diffstat (limited to 'sys/netinet/ip_icmp.c')
-rw-r--r--sys/netinet/ip_icmp.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/netinet/ip_icmp.c b/sys/netinet/ip_icmp.c
index c4ea24c..58a4915 100644
--- a/sys/netinet/ip_icmp.c
+++ b/sys/netinet/ip_icmp.c
@@ -654,8 +654,11 @@ icmp_reflect(m)
if (opt == IPOPT_NOP)
len = 1;
else {
+ if (cnt < IPOPT_OLEN + sizeof(*cp))
+ break;
len = cp[IPOPT_OLEN];
- if (len <= 0 || len > cnt)
+ if (len < IPOPT_OLEN + sizeof(*cp) ||
+ len > cnt)
break;
}
/*
OpenPOWER on IntegriCloud