a23a2b5128
[ Upstream commit f57c4bbf34439531adccd7d3a4ecc14f409c1399 ]
NEXTHDR_MAX is 255. What happens here is that we take a u8 value
"hdr->nexthdr" from the network and then look it up in
lowpan_nexthdr_nhcs[]. The problem is that if hdr->nexthdr is 0xff then
we read one element beyond the end of the array so the array needs to
be one element larger.
Fixes:
|
||
---|---|---|
.. | ||
6lowpan_i.h | ||
core.c | ||
debugfs.c | ||
iphc.c | ||
Kconfig | ||
Makefile | ||
ndisc.c | ||
nhc.c | ||
nhc.h | ||
nhc_dest.c | ||
nhc_fragment.c | ||
nhc_ghc_ext_dest.c | ||
nhc_ghc_ext_frag.c | ||
nhc_ghc_ext_hop.c | ||
nhc_ghc_ext_route.c | ||
nhc_ghc_icmpv6.c | ||
nhc_ghc_udp.c | ||
nhc_hop.c | ||
nhc_ipv6.c | ||
nhc_mobility.c | ||
nhc_routing.c | ||
nhc_udp.c |