View | Details | Raw Unified | Return to bug 64726
Collapse All | Expand All

(-)src/racoon/isakmp.c (-1 / +1 lines)
Lines 1346-1352 Link Here
1346 

          1346
          

        

        

          1347
          
		p->type = np;

          1347
          
		p->type = np;

        

        

          1348
          
		p->len = ntohs(gen->len);

          1348
          
		p->len = ntohs(gen->len);

        

          
            

              1349
              
		if (p->len == 0 || p->len > tlen) {


              1349
              
		if (p->len < sizeof(struct isakmp_gen) || p->len > tlen) {

            

        

          1350
          
			plog(LLV_DEBUG, LOCATION, NULL,

          1350
          
			plog(LLV_DEBUG, LOCATION, NULL,

        

        

          1351
          
				"invalid length of payload\n");

          1351
          
				"invalid length of payload\n");

        

        

          1352
          
			vfree(result);

          1352
          
			vfree(result);

        






  

  Return to bug 64726