Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: f867cf1) | patch
mpls: fix header offset overflow 74/20174/5
authorBenoît Ganne <bganne@cisco.com>
Mon, 17 Jun 2019 12:42:47 +0000 (14:42 +0200)
committerNeale Ranns <nranns@cisco.com>
Wed, 19 Jun 2019 06:52:45 +0000 (06:52 +0000)
commitc257e076211d0bff2547e1b67a62576bbdb2963e
treef3fcfb3b3f0c176d57bf4439723caede68233a18tree | snapshot
parentf867cf1656b5906fb112f9e60ff65e46f6e1719acommit | diff
mpls: fix header offset overflow

rw_len (MPLS rewrite string length) is declared as unsigned but is used
as -rw_len with vlib_buffer_advance(), resulting in a wrong, huge
offset.

Type: fix
Fixes: 734d430f37251bc7e71d507983ee640ae1625fbe
Ticket: VPP-1705
Change-Id: I7357249f7e50b7d30fd61f5be4858a26e43df85d
Signed-off-by: Benoît Ganne <bganne@cisco.com>
src/vnet/mpls/mpls_output.c diff | blob | history
Vector Packet Processing