DWS/chrony
1
0
Fork 0
mirror of https://gitlab.com/chrony/chrony.git synced 2025-12-04 14:05:08 -05:00
Code Issues Packages Projects Releases Wiki Activity

ntp: fix length check of NTPv4 extension fields

Browse Source 
Don't allow extension fields shorter than 16 bytes.
This commit is contained in:
Miroslav Lichvar
2015-01-07 13:58:11 +01:00
parent 52e12e42e5
commit 35e11ffe60
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ntp_core.c
View File

@@ -1040,7 +1040,8 @@ check_packet_auth(NTP_Packet *pkt, int length, int *has_auth, uint32_t *key_id)
16-bit length of the whole field aligned to 32 bits and data. */ 16-bit length of the whole field aligned to 32 bits and data. */
if (remainder >= NTP_MIN_EXTENSION_LENGTH) { if (remainder >= NTP_MIN_EXTENSION_LENGTH) {
ext_length = ntohs(*(uint16_t *)(data + i + 2)); ext_length = ntohs(*(uint16_t *)(data + i + 2));
if (ext_length % 4 == 0 && ext_length <= remainder) { if (ext_length >= NTP_MIN_EXTENSION_LENGTH &&
ext_length <= remainder && ext_length % 4 == 0) {
i += ext_length; i += ext_length;
continue; continue;
} }