1
0
mirror of https://passt.top/passt synced 2024-07-01 23:42:41 +00:00

udp: Out-of-bounds read, CWE-125 in udp_timer()

Not an actual issue due to how it's typically stored, but udp_act
can also be used for ports 65528-65535. Reported by Coverity.

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
This commit is contained in:
Stefano Brivio 2022-04-05 14:02:56 +02:00
parent 5ab2e12f98
commit 2b1fbf4631

2
udp.c
View File

@ -180,7 +180,7 @@ enum udp_act_type {
};
/* Activity-based aging for bindings */
static uint8_t udp_act[IP_VERSIONS][UDP_ACT_TYPE_MAX][USHRT_MAX / 8];
static uint8_t udp_act[IP_VERSIONS][UDP_ACT_TYPE_MAX][(USHRT_MAX + 1) / 8];
/* Static buffers */