From: Bertrand Jacquin <jacquinb@amazon.com>
Date: Wed, 13 Dec 2017 01:40:24 +0000 (+0000)
Subject: BUG/MEDIUM: netscaler: use the appropriate IPv6 header size
X-Git-Tag: v1.9-dev1~571
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c7cc69ac3676c0d3cc14e80c6f7ccde49b05de2c;p=thirdparty%2Fhaproxy.git

BUG/MEDIUM: netscaler: use the appropriate IPv6 header size

IPv6 header has a fixed size of 40 bytes, not 20.
---

diff --git a/src/connection.c b/src/connection.c
index a47d4d1fdb..c06babd926 100644
--- a/src/connection.c
+++ b/src/connection.c
@@ -798,7 +798,7 @@ int conn_recv_netscaler_cip(struct connection *conn, int flag)
 
 		hdr_ip6 = (struct ip6_hdr *)line;
 
-		if (trash.len < 28) {
+		if (trash.len < 48) {
 			/* Fail if buffer length is not large enough to contain
 			 * CIP magic, CIP length, IPv6 header */
 			goto missing;
@@ -808,7 +808,7 @@ int conn_recv_netscaler_cip(struct connection *conn, int flag)
 			conn->err_code = CO_ER_CIP_BAD_PROTO;
 			goto fail;
 		}
-		else if (trash.len < 48) {
+		else if (trash.len < 68) {
 			/* Fail if buffer length is not large enough to contain
 			 * CIP magic, CIP length, IPv6 header, TCP header */
 			goto missing;