u-boot/net
Ehsan Mohandesi a29df56eab net: ipv6: router advertisement message length should be within limits
The argument len passed to function process_ra is the length of the IPv6
router advertisement message and needs to be between 0 and MTU because
it is assigned to remaining_option_len and used as a loop variable.

Addresses-Coverity-ID: 450971 ("TAINTED_SCALAR")
Signed-off-by: Ehsan Mohandesi <emohandesi@linux.microsoft.com>
Reviewed-by: Viacheslav Mitrofanov <v.v.mitrofanov@yadro.com>
Reviewed-by: Ramon Fried <rfried.dev@gmail.com>
2023-07-27 13:39:07 -04:00
..
arp.c
arp.h
bootp.c
bootp.h
cdp.c
cdp.h
dhcpv6.c
dhcpv6.h
dns.c
dns.h
dsa-uclass.c
eth-uclass.c
eth_bootdev.c
eth_common.c
eth_internal.h
fastboot_tcp.c
fastboot_udp.c
Kconfig
link_local.c
link_local.h
Makefile
mdio-mux-uclass.c
mdio-uclass.c
ndisc.c
net.c
net6.c
net_rand.h
nfs.c
nfs.h
pcap.c
ping.c
ping.h
ping6.c
rarp.c
rarp.h
sntp.c
tcp.c
tftp.c
udp.c
wget.c
wol.c
wol.h