From 13741548a6a75479577ea991bad1e38a4fba6320 Mon Sep 17 00:00:00 2001
From: Ondrej Filip <feela@network.cz>
Date: Wed, 10 May 2000 15:04:21 +0000
Subject: Some better lsa checking added.

---
 proto/ospf/lsupd.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'proto')

diff --git a/proto/ospf/lsupd.c b/proto/ospf/lsupd.c
index 64d7dac..1bae1bd 100644
--- a/proto/ospf/lsupd.c
+++ b/proto/ospf/lsupd.c
@@ -251,6 +251,16 @@ ospf_lsupd_rx(struct ospf_lsupd_packet *ps, struct proto *p,
   {
     struct ospf_lsa_header lsatmp;
     struct top_hash_entry *lsadb;
+    u16 lenn;
+
+    lenn=ntohs(lsa->length);
+
+    if((lenn<=sizeof(struct ospf_lsa_header))||(lenn!=(4*(lenn/4))))
+    {
+      log("Received LSA with bad length\n");
+      ospf_neigh_sm(n,INM_BADLSREQ);
+      break;
+    }
     /* pg 143 (1) */
     if(lsa->checksum!=lsasum_check(lsa,NULL,po))
     {
-- 
cgit v1.2.3