nat: harden ICMP handling 15/32915/2
authorKlement Sekera <ksekera@cisco.com>
Mon, 28 Jun 2021 11:40:40 +0000 (13:40 +0200)
committerOle Tr�an <otroan@employees.org>
Mon, 19 Jul 2021 17:46:33 +0000 (17:46 +0000)
commit05b5a5b3b4b04823776feed6403b5a99b2e06d76
treeb3becc951fccb20f0785acf6f4349a0a2b16a484
parent04572bea3499ab013d92799648c38b021767ff39
nat: harden ICMP handling

Verify that headers are not truncated and that checksums are valid.
Correct checksum computation in translation code.

Type: fix
Change-Id: I6acfcec4661411f83c86b15aafac90cd4538c0b5
Signed-off-by: Klement Sekera <ksekera@cisco.com>
src/plugins/nat/nat44-ed/nat44_ed.c
src/plugins/nat/nat44-ed/nat44_ed.h
src/plugins/nat/nat44-ed/nat44_ed_in2out.c
src/plugins/nat/nat44-ed/nat44_ed_out2in.c
test/test_nat44_ed.py