planix.org/actube
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix seg fault when debugging malformed packets.

Browse Source 
FossilOrigin-Name: 00ef6c62d1aa05b454fc7edce9ad0622cb969c886fab51748391dfc470d1fcea
This commit is contained in:
7u83@mail.ru 2016-04-11 16:02:30 +00:00
parent 0331295d93
commit bad5515e49
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/cw/conn_process_packet.c
View File

@ -381,9 +381,6 @@ static int process_elements(struct conn *conn, uint8_t * rawmsg, int len,
as.elem_id = cw_get_elem_id(elem);
int elem_len = cw_get_elem_len(elem);
cw_dbg_elem(DBG_ELEM, conn, as.msg_id, as.elem_id, cw_get_elem_data(elem),
elem_len);
af = cw_actionlist_in_get(conn->actions->in, &as);
@ -399,6 +396,10 @@ static int process_elements(struct conn *conn, uint8_t * rawmsg, int len,
if (!check_len(conn, af, cw_get_elem_data(elem), elem_len, from)) {
continue;
}
cw_dbg_elem(DBG_ELEM, conn, as.msg_id, as.elem_id, cw_get_elem_data(elem),
elem_len);
int afrc = 1;
if (af->start) {
@ -413,6 +414,10 @@ static int process_elements(struct conn *conn, uint8_t * rawmsg, int len,
stravltree_add(conn->mand, af->item_id);
}
if(conn->elem_end){
afrc = conn->elem_end(conn,af,afrc,cw_get_elem_data(elem), elem_len,from);
}
}
/* all message elements are processed, do now after processing
@ -421,7 +426,9 @@ static int process_elements(struct conn *conn, uint8_t * rawmsg, int len,
int result_code = 0;
int rct = cw_in_check_generic_req(conn, afm, rawmsg, len, from);
int rct = cw_in_check_generic(conn, afm, rawmsg, len, from);
if (rct && conn->strict_capwap)
{
result_code = rct;