From: Martin Willi Date: Wed, 17 Apr 2013 12:48:58 +0000 (+0200) Subject: kernel-pfroute: fix length check when receiving PF_ROUTE messages X-Git-Tag: 5.1.0dr1~153^2~25 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e8002956c996e63830ea1d7026090cd0bd907abb;p=thirdparty%2Fstrongswan.git kernel-pfroute: fix length check when receiving PF_ROUTE messages --- diff --git a/src/libhydra/plugins/kernel_pfroute/kernel_pfroute_net.c b/src/libhydra/plugins/kernel_pfroute/kernel_pfroute_net.c index 7ac3e8a3cf..7e26cc37b5 100644 --- a/src/libhydra/plugins/kernel_pfroute/kernel_pfroute_net.c +++ b/src/libhydra/plugins/kernel_pfroute/kernel_pfroute_net.c @@ -475,7 +475,7 @@ static job_requeue_t receive_events(private_kernel_pfroute_net_t *this) } } - if (len < sizeof(msg->rtm_msglen) || len < msg->rtm_msglen || + if (len < sizeof(*msg) || len < msg->rtm_msglen || msg->rtm_version != RTM_VERSION) { DBG2(DBG_KNL, "received corrupted PF_ROUTE message");