riot-ci/RIOT
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #15589 from benpicco/gnrc_ipv6_nib-nce_exhaustion

Browse Source 
gnrc_ipv6_nib: prevent NULL pointer dereference on nib exhaustion
This commit is contained in:
Martine Lenders 2020-12-08 22:03:33 +01:00 committed by GitHub
commit 81dd58c7af
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/net/gnrc/network_layer/ipv6/nib/_nib-6lr.c
View File

@ -84,8 +84,15 @@ uint8_t _reg_addr_upstream(gnrc_netif_t *netif, const ipv6_hdr_t *ipv6,
#endif /* CONFIG_GNRC_IPV6_NIB_MULTIHOP_DAD */ #endif /* CONFIG_GNRC_IPV6_NIB_MULTIHOP_DAD */
if (aro->ltime.u16 != 0) { if (aro->ltime.u16 != 0) {
_handle_sl2ao(netif, ipv6, icmpv6, sl2ao); _handle_sl2ao(netif, ipv6, icmpv6, sl2ao);
/* re-get NCE in case it was updated */ /* re-get NCE in case it was updated */
nce = _nib_onl_get(&ipv6->src, netif->pid); nce = _nib_onl_get(&ipv6->src, netif->pid);
/* NIB is full */
if (nce == NULL) {
return SIXLOWPAN_ND_STATUS_NC_FULL;
}
/* and re-check EUI-64 in case nce was not an NC before */ /* and re-check EUI-64 in case nce was not an NC before */
if ((memcmp(&nce->eui64, &aro->eui64, if ((memcmp(&nce->eui64, &aro->eui64,
sizeof(aro->eui64)) != 0) && sizeof(aro->eui64)) != 0) &&