forked from Mirror/frr
ripd: out-of-bounds read (Coverity 1399295)
Signed-off-by: F. Aragon <paco@voltanet.io>
This commit is contained in:
parent
0a8990d5f8
commit
0961ea934f
|
@ -799,11 +799,11 @@ static int rip_auth_simple_password(struct rte *rte, struct sockaddr_in *from,
|
|||
struct interface *ifp)
|
||||
{
|
||||
struct rip_interface *ri;
|
||||
char *auth_str = (char *)&rte->prefix;
|
||||
char *auth_str = (char *)rte + offsetof(struct rte, prefix);
|
||||
int i;
|
||||
|
||||
/* reject passwords with zeros in the middle of the string */
|
||||
for (i = strlen(auth_str); i < 16; i++) {
|
||||
for (i = strnlen(auth_str, 16); i < 16; i++) {
|
||||
if (auth_str[i] != '\0')
|
||||
return 0;
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue