xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

ip/tinc: handle single byte noop and end-of-option-list tcp options in clampmss()

Browse source
This commit is contained in:
cinap_lenrek 2017-12-17 20:20:17 +01:00
parent 15ff38e818
commit 0affe02b61
1 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
sys/src/cmd/ip/tinc.c
View file

@ -970,9 +970,20 @@ clampmss(Host *d, uchar *p, int n, int o)
return;
if((e = p+(p[12]>>4)*4) > p+n)
return;
for(h = p+TcpHdr; h+4 <= e && h[1] > 0; h += h[1])
for(h = p+TcpHdr; h < e;){
switch(h[0]){
case 0:
return;
case 1:
h++;
continue;
}
if(h[1] < 2 || h[1] > e - h)
return;
if(h[0] == 2 && h[1] == 4)
goto Found;
h += h[1];
}
return;
Found:
oldmss = h[2]<<8 | h[3];