network: tc: fix n_prio bounds check

Looks like a simple copy and paste error

Fixes https://github.com/systemd/systemd/issues/16367

diff --git a/src/network/tc/ets.c b/src/network/tc/ets.c
index c4fa5646dd53187e2393b0435e8c52daa52cbf5b..83e9d8bff38a84f463370f29bd6c12fadd3c6016 100644 (file)
--- a/src/network/tc/ets.c
+++ b/src/network/tc/ets.c
@@ -283,7 +283,7 @@ int config_parse_ets_prio(
                                    lvalue, word);
                         continue;
                 }
-                if (ets->n_quanta > TC_PRIO_MAX) {
+                if (ets->n_prio > TC_PRIO_MAX) {
                         log_syntax(unit, LOG_ERR, filename, line, 0,
                                    "Too many priomap in '%s=', ignoring assignment: %s",
                                    lvalue, word);

diff --git a/test/fuzz/fuzz-network-parser/oss-fuzz-23895 b/test/fuzz/fuzz-network-parser/oss-fuzz-23895
new file mode 100644 (file)
index 0000000..a86361d
Binary files /dev/null and b/test/fuzz/fuzz-network-parser/oss-fuzz-23895 differ