diff options
author | 2020-05-06 15:15:31 +0000 | |
---|---|---|
committer | 2020-05-06 15:15:31 +0000 | |
commit | 20d59b6084bbcc85c19d4eabb6f84c072e6d4c20 (patch) | |
tree | 8ee043607db9fce1f60793fd303bd8d56dd8104d /sys/kern/tty.c | |
parent | Do not use the pointer returned by ibuf_reserve() after calling another (diff) | |
download | wireguard-openbsd-20d59b6084bbcc85c19d4eabb6f84c072e6d4c20.tar.xz wireguard-openbsd-20d59b6084bbcc85c19d4eabb6f84c072e6d4c20.zip |
Same fix for ospfd lsupdate.c applies in ospf6d as well.
Do not use the pointer returned by ibuf_reserve() after calling another
ibuf function. After the call the internal buffer may have moved by realloc()
and so the pointer is invalid. Instead use ibuf_size() to get the current
offset in the buffer and use ibuf_seek() later on to write back the updated
lsa age into the buffer at the right spot.
This fixes an issue seen by Richard Chivers on routers with many passive
interfaces.
OK stsp@ denis@ deraadt@ also tested by sthen@
Diffstat (limited to 'sys/kern/tty.c')
0 files changed, 0 insertions, 0 deletions