From: pcarana <pc.moreno2099@gmail.com>
Date: Tue, 9 Apr 2019 21:26:17 +0000 (-0500)
Subject: Validate that SKI is 20 octets long
X-Git-Tag: v0.0.2~49^2~8
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=090f551a4531f5ae8bbfcde1fb03551ffbb01cf2;p=thirdparty%2FFORT-validator.git

Validate that SKI is 20 octets long
---

diff --git a/src/slurm/slurm_parser.c b/src/slurm/slurm_parser.c
index bfebf362..578daf4f 100644
--- a/src/slurm/slurm_parser.c
+++ b/src/slurm/slurm_parser.c
@@ -327,6 +327,12 @@ set_ski(json_t *object, bool is_assertion, struct slurm_bgpsec *result)
 	/* TODO persist, free later */
 	free(result->ski);
 
+	/* Validate that's at least 20 octects long */
+	if (result->ski_len != 20) {
+		warnx("The decoded SKI must be 20 octets long");
+		return -EINVAL;
+	}
+
 	result->data_flag = result->data_flag | SLURM_BGPS_FLAG_SKI;
 	return 0;
 }