Martin Kaiser
changed
bug 8039
Comment # 1
on bug 8039
from Martin Kaiser
it's looping in dissect_mpls_echo_tlv_dd_map()
subtlv_length==0
while (rem>4)
invalid subtlv_type -> jumps to default -> rem is not decremented
we could return; for subtlv_length==0
Looking at RFC 6424, the whole approach is unclear to me. We seem to read
subtlv_type and _length only once and then do the while loop. Section 3.3 of
RFC6424 says that there's a list of subtlvs, I'd expect type and length to be
read in the while loop...
You are receiving this mail because:
- You are watching all bug changes.