From: Vito Caputo <vcaputo@pengaru.com>
Date: Mon, 6 Jul 2020 07:36:51 +0000 (-0700)
Subject: network: tc: fix n_prio bounds check
X-Git-Tag: v246-rc1~38
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e26538dd04ef3a0fa1582ff3be4ec1ec5c9a4178;p=thirdparty%2Fsystemd.git

network: tc: fix n_prio bounds check

Looks like a simple copy and paste error

Fixes https://github.com/systemd/systemd/issues/16367
---

diff --git a/src/network/tc/ets.c b/src/network/tc/ets.c
index c4fa5646dd5..83e9d8bff38 100644
--- a/src/network/tc/ets.c
+++ b/src/network/tc/ets.c
@@ -283,7 +283,7 @@ int config_parse_ets_prio(
                                    lvalue, word);
                         continue;
                 }
-                if (ets->n_quanta > TC_PRIO_MAX) {
+                if (ets->n_prio > TC_PRIO_MAX) {
                         log_syntax(unit, LOG_ERR, filename, line, 0,
                                    "Too many priomap in '%s=', ignoring assignment: %s",
                                    lvalue, word);
diff --git a/test/fuzz/fuzz-network-parser/oss-fuzz-23895 b/test/fuzz/fuzz-network-parser/oss-fuzz-23895
new file mode 100644
index 00000000000..a86361d0b3b
Binary files /dev/null and b/test/fuzz/fuzz-network-parser/oss-fuzz-23895 differ