diff options
| author | kris <kris@FreeBSD.org> | 2001-02-20 03:25:50 +0000 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2001-02-20 03:25:50 +0000 |
| commit | 40f8cb7717abff1f4480b170979d585ffa5f37c1 (patch) | |
| tree | efe3f729fd1963351e52c539190264eee0b7e4d0 /sys/netinet6/ah_output.c | |
| parent | aed10fa9a00dc1ec8c43ba79fe2664e765fd808f (diff) | |
| download | FreeBSD-src-40f8cb7717abff1f4480b170979d585ffa5f37c1.zip FreeBSD-src-40f8cb7717abff1f4480b170979d585ffa5f37c1.tar.gz | |
Correct IPv4 option processing.
Submitted by: itojun
Obtained from: KAME
Diffstat (limited to 'sys/netinet6/ah_output.c')
| -rw-r--r-- | sys/netinet6/ah_output.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/sys/netinet6/ah_output.c b/sys/netinet6/ah_output.c index 477c589..df9f4d5 100644 --- a/sys/netinet6/ah_output.c +++ b/sys/netinet6/ah_output.c @@ -521,6 +521,15 @@ ah4_finaldst(m) q = (u_char *)(ip + 1); i = 0; while (i < optlen) { + if (i + IPOPT_OPTVAL >= optlen) + return NULL; + if (q[i + IPOPT_OPTVAL] == IPOPT_EOL || + q[i + IPOPT_OPTVAL] == IPOPT_NOP || + i + IPOPT_OLEN < optlen) + ; + else + return NULL; + switch (q[i + IPOPT_OPTVAL]) { case IPOPT_EOL: i = optlen; /* bye */ |
