23 Jan
2015
23 Jan
'15
4:32 p.m.
On Monday 19 January 2015 21:59:32 Jan-Philipp Litza wrote:
When first checking if a received packet is truncated, the size of the alfred_tlv structure is ignored, thus allowing packets that are truncated by 4 bytes or less to pass the check unnoticed.
Even the check itself might access memory after the packet if its size was only 2 bytes or less.
Signed-off-by: Jan-Philipp Litza janphilipp@litza.de
applied in commit 0e2728c.
Thanks! Simon