diff options
| author | Paul Jakma <paul@quagga.net> | 2010-12-05 17:17:26 +0000 |
|---|---|---|
| committer | Paul Jakma <paul@quagga.net> | 2011-03-21 13:50:56 +0000 |
| commit | 0c46638122f10019a12ae9668aec91691cf2e017 (patch) | |
| tree | 1302073e844ff46061ebb938bcd218ed9fbb96bf /bgpd/bgp_route.c | |
| parent | 8f228de7b3f9d6f641c75b27ac7ac6e5862cf804 (diff) | |
bgpd/security: CVE-2010-1674 Fix crash due to extended-community parser error
* bgp_attr.c: (bgp_attr_ext_communities) Certain extended-community attrs
can leave attr->flag indicating ext-community is present, even though no
extended-community object has been attached to the attr structure. Thus a
null-pointer dereference can occur later.
(bgp_attr_community) No bug fixed here, but tidy up flow so it has same
form as previous.
Problem and fix thanks to anonymous reporter.
Diffstat (limited to 'bgpd/bgp_route.c')
0 files changed, 0 insertions, 0 deletions