diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 04:24:33 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 04:24:33 +0000 |
commit | 98acfdcc783ec963d9c70a1d60253822bcb09a86 (patch) | |
tree | 00be37f61aa6cf8a4807b35e2e1dc8083083bf6e /debian/patches/CVE-2024-27913.patch | |
parent | Merging upstream version 10.0. (diff) | |
download | frr-98acfdcc783ec963d9c70a1d60253822bcb09a86.tar.xz frr-98acfdcc783ec963d9c70a1d60253822bcb09a86.zip |
Adding debian version 10.0-0.1.debian/10.0-0.1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches/CVE-2024-27913.patch')
-rw-r--r-- | debian/patches/CVE-2024-27913.patch | 34 |
1 files changed, 0 insertions, 34 deletions
diff --git a/debian/patches/CVE-2024-27913.patch b/debian/patches/CVE-2024-27913.patch deleted file mode 100644 index 0db69fd..0000000 --- a/debian/patches/CVE-2024-27913.patch +++ /dev/null @@ -1,34 +0,0 @@ -commit aae54e20498974cb026bd0e2649ca3e753090492 -Author: Olivier Dugeon <olivier.dugeon@orange.com> -Date: Mon Feb 26 10:40:34 2024 +0100 - - ospfd: Solved crash in OSPF TE parsing - - Iggy Frankovic discovered an ospfd crash when perfomring fuzzing of OSPF LSA - packets. The crash occurs in ospf_te_parse_te() function when attemping to - create corresponding egde from TE Link parameters. If there is no local - address, an edge is created but without any attributes. During parsing, the - function try to access to this attribute fields which has not been created - causing an ospfd crash. - - The patch simply check if the te parser has found a valid local address. If not - found, we stop the parser which avoid the crash. - - Signed-off-by: Olivier Dugeon <olivier.dugeon@orange.com> - (cherry picked from commit a73e66d07329d721f26f3f336f7735de420b0183) - -diff --git a/ospfd/ospf_te.c b/ospfd/ospf_te.c -index d203b5ef4..1a01bf77b 100644 ---- a/ospfd/ospf_te.c -+++ b/ospfd/ospf_te.c -@@ -2245,6 +2245,10 @@ static int ospf_te_parse_te(struct ls_ted *ted, struct ospf_lsa *lsa) - } - - /* Get corresponding Edge from Link State Data Base */ -+ if (IPV4_NET0(attr.standard.local.s_addr) && !attr.standard.local_id) { -+ ote_debug(" |- Found no TE Link local address/ID. Abort!"); -+ return -1; -+ } - edge = get_edge(ted, attr.adv, attr.standard.local); - old = edge->attributes; - |