diff options
author | Archie Cobbs <archie@FreeBSD.org> | 2002-10-10 18:27:54 +0000 |
---|---|---|
committer | Archie Cobbs <archie@FreeBSD.org> | 2002-10-10 18:27:54 +0000 |
commit | 49a633b0f4dfbdf5a9f1e9d99bdb3789646c132f (patch) | |
tree | 57f5af9bba05d5b212dd6e8de857b1b8618b045e /sys/netgraph | |
parent | cced28f12896375a08b97ea4078d1147313b1d5a (diff) | |
download | src-49a633b0f4dfbdf5a9f1e9d99bdb3789646c132f.tar.gz src-49a633b0f4dfbdf5a9f1e9d99bdb3789646c132f.zip |
MFC: (rev. 1.26) Ignore a bogus payload length field when there's no payload.
Notes
Notes:
svn path=/stable/4/; revision=104810
Diffstat (limited to 'sys/netgraph')
-rw-r--r-- | sys/netgraph/ng_pptpgre.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netgraph/ng_pptpgre.c b/sys/netgraph/ng_pptpgre.c index 815e4f3583e3..0550a0f51343 100644 --- a/sys/netgraph/ng_pptpgre.c +++ b/sys/netgraph/ng_pptpgre.c @@ -619,7 +619,7 @@ bad: /* Sanity check packet length and GRE header bits */ extralen = m->m_pkthdr.len - - (iphlen + grelen + (u_int16_t)ntohs(gre->length)); + - (iphlen + grelen + gre->hasSeq * (u_int16_t)ntohs(gre->length)); if (extralen < 0) { priv->stats.recvBadGRE++; goto bad; |