← Back to branch summary

~ubuntu-branches/ubuntu/quantal/quagga/quantal

« back to all changes in this revision

Viewing changes to zebra/interface.c

  • Committer: Bazaar Package Importer
  • Author(s): Christian Hammers
  • Date: 2010-08-25 00:52:48 UTC
  • mfrom: (1.1.11 upstream) (17.1.5 sid)
  • Revision ID: james.westby@ubuntu.com-20100825005248-ihwizcunu7bzp4fv
Tags: 0.99.17-1
http://bugs.debian.org/594262
SECURITY:
"This release provides two important bugfixes, which address remote crash
possibility in bgpd discovered by CROSS team.":
1. Stack buffer overflow by processing certain Route-Refresh messages
CVE-2010-2948
2. DoS (crash) while processing certain BGP update AS path messages
CVE-2010-2949
Closes: #594262

Show diffs side-by-side

added added

removed removed

Lines of Context:
zebra/interface.c
477
477
                }
478
478
            }
479
479
#endif /* HAVE_IPV6 */
 
480
          else
 
481
            {
 
482
              last = node;
 
483
            }
480
484
        }
481
485
    }
482
486
  zebra_interface_delete_update (ifp);