Merge pull request FRRouting#16111 from donaldsharp/ospfv3_read_after

ospf6d: Prevent heap-buffer-overflow with unknown type
donaldsharp · May 31, 2024 · cdc964c · cdc964c
2 parents 85120c0 + 826f251
commit cdc964c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ospf6d/ospf6_gr_helper.c b/ospf6d/ospf6_gr_helper.c
@@ -176,6 +176,7 @@ static int ospf6_extract_grace_lsa_fields(struct ospf6_lsa *lsa,
 				return OSPF6_FAILURE;
 			break;
 		default:
+			sum += TLV_SIZE(tlvh);
 			if (IS_DEBUG_OSPF6_GR)
 				zlog_debug("%s, Ignoring unknown TLV type:%d",
 					   __func__, ntohs(tlvh->type));