[PATCH 1/2] net: ipv6: router advertisement message length should be within limits

Tom Rini trini at konsulko.com
Thu Jul 27 22:46:29 CEST 2023


On Thu, May 18, 2023 at 11:24:38AM -0700, emohandesi at linux.microsoft.com wrote:

> From: Ehsan Mohandesi <emohandesi at linux.microsoft.com>
> 
> The argument len passed to function process_ra is the length of the IPv6
> router advertisement message and needs to be between 0 and MTU because
> it is assigned to remaining_option_len and used as a loop variable.
> 
> Addresses-Coverity-ID: 450971 ("TAINTED_SCALAR")
> Signed-off-by: Ehsan Mohandesi <emohandesi at linux.microsoft.com>
> Reviewed-by: Viacheslav Mitrofanov <v.v.mitrofanov at yadro.com>
> Reviewed-by: Ramon Fried <rfried.dev at gmail.com>

Applied to u-boot/master, thanks!

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20230727/a7d3524a/attachment.sig>


More information about the U-Boot mailing list