mirror of
https://github.com/thead-yocto-mirror/meta-openembedded
synced 2026-09-16 12:12:16 +02:00
2ea5feedac
1. use PACKAGECONFIG 2. add three patches which will add the address check, to avoid SEGFAULT Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
27 lines
766 B
Diff
27 lines
766 B
Diff
Subject: [PATCH] ipsec-tools: racoon: check several invalid ivm
|
|
|
|
Upstream-Status: Pending
|
|
|
|
Add checking for invalid ivm, or it will crash racoon.
|
|
|
|
Signed-off-by: Ming Liu <ming.liu@windriver.com>
|
|
---
|
|
isakmp_cfg.c | 5 +++++
|
|
1 file changed, 5 insertions(+)
|
|
|
|
diff -urpN a/src/racoon/isakmp_cfg.c b/src/racoon/isakmp_cfg.c
|
|
--- a/src/racoon/isakmp_cfg.c
|
|
+++ b/src/racoon/isakmp_cfg.c
|
|
@@ -171,6 +171,11 @@ isakmp_cfg_r(iph1, msg)
|
|
iph1->mode_cfg->last_msgid != packet->msgid )
|
|
iph1->mode_cfg->ivm =
|
|
isakmp_cfg_newiv(iph1, packet->msgid);
|
|
+ if(iph1->mode_cfg->ivm == NULL) {
|
|
+ plog(LLV_ERROR, LOCATION, NULL,
|
|
+ "failed to create new IV\n");
|
|
+ return;
|
|
+ }
|
|
ivm = iph1->mode_cfg->ivm;
|
|
|
|
dmsg = oakley_do_decrypt(iph1, msg, ivm->iv, ivm->ive);
|