crash in ospf lsupd/dbdes (only if authentication enabled?)

Ondrej Zajicek santiago at crfreenet.org
Wed Jan 8 14:09:09 CET 2020


On Wed, Jan 08, 2020 at 12:46:14PM +0000, Kenth Eriksson wrote:
> On Wed, 2020-01-08 at 13:25 +0100, Ondrej Zajicek wrote:
> > 
> > What do you have in ifa->tx_length and ifa->tx_hdrlen?
> 
> *plen=1504, ifa->sk->tbsize=1492, auth_len=32, ifa->tx_length=1492,
> ifa->tx_hdrlen=20

Seems like tx_hdrlen is computed before autype and passwords fields are
filled. I will send you patch.

-- 
Elen sila lumenn' omentielvo

Ondrej 'Santiago' Zajicek (email: santiago at crfreenet.org)
OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net)
"To err is human -- to blame it on a computer is even more so."


More information about the Bird-users mailing list