OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
CVS: cvs.openbsd.org: src

From: Brad Smith (bradcvs.openbsd.org)
Date: Sat Sep 02 2006 - 13:09:01 CDT


CVSROOT: /cvs
Module name: src
Changes by: bradcvs.openbsd.org 2006/09/02 12:09:01

Modified files:
        sys/net : Tag: OPENBSD_3_9 if_spppsubr.c

Log message:
MFC:
Fix by canacar

Check for illegal option lengths when parsing LCP packets
and drop such bad packets. Also remove some redundant mallocs.

This fixes possible heap overflows when forming replys to such bad
packets as discovered by Martin Husemann and Pavel Cahyna.

reported by NetBSD, initial diff from markus,
additional comments by claudio, ok markus