On Tue, Feb 25, 2020 at 3:02 PM Numan Siddique wrote:
>
> On Tue, Feb 25, 2020 at 2:43 PM Dumitru Ceara wrote:
> >
> > On 2/25/20 12:39 AM, Ben Pfaff wrote:
> > > The call to packet_set_ipv6() calls into packet_rh_present(), which in
> > > turn iterates through the L3 content. Without this
On Tue, Feb 25, 2020 at 2:43 PM Dumitru Ceara wrote:
>
> On 2/25/20 12:39 AM, Ben Pfaff wrote:
> > The call to packet_set_ipv6() calls into packet_rh_present(), which in
> > turn iterates through the L3 content. Without this commit, the l4_ofs
> > in the packet has its default value of
On 2/25/20 12:39 AM, Ben Pfaff wrote:
> The call to packet_set_ipv6() calls into packet_rh_present(), which in
> turn iterates through the L3 content. Without this commit, the l4_ofs
> in the packet has its default value of UINT16_MAX, which means that
> packet_rh_present() reads well beyond the
The call to packet_set_ipv6() calls into packet_rh_present(), which in
turn iterates through the L3 content. Without this commit, the l4_ofs
in the packet has its default value of UINT16_MAX, which means that
packet_rh_present() reads well beyond the real maximum length of the
IPv6 header.