kaspar/RIOT
1
0
Fork 0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2025-12-15 09:33:50 +01:00
Code Releases Activity

gnrc_ipv6_ext_frag: fail on first fragment buffer is too small

Browse Source 
This case can happen if a second, but larger first fragment is send
after a smaller.
This commit is contained in:
Nils Bernsdorf 2025-12-04 15:27:02 +01:00 committed by Martine Lenders
parent 55564abb5d
commit d64dcbb71f
No known key found for this signature in database
GPG Key ID: F35493B97485320B
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/net/gnrc/network_layer/ipv6/ext/frag/gnrc_ipv6_ext_frag.c
View File

@ -524,6 +524,11 @@ gnrc_pktsnip_t *gnrc_ipv6_ext_frag_reass(gnrc_pktsnip_t *pkt)
DEBUG("ipv6_ext_frag: fragment length not divisible by 8");
goto error_exit;
}
else if (rbuf->pkt != NULL && rbuf->pkt->size < pkt->size) {
DEBUG("ipv6_ext_frag: reassembly buffer too small to fit first "
"fragment\n");
goto error_exit;
}
_set_nh(fh_snip->next, nh);
gnrc_pktbuf_remove_snip(pkt, fh_snip);
/* TODO: RFC 8200 says "- 8"; determine if `sizeof(ipv6_ext_frag_t)` is