Skip to content

bgpd: Add some defences for AS4/ENCAP handling (backport #21777) - #21790

Merged
mjstapp merged 2 commits into
FRRouting:stable/10.6from
opensourcerouting:fix/security_hardening_bgp_10.6
Apr 28, 2026
Merged

bgpd: Add some defences for AS4/ENCAP handling (backport #21777)#21790
mjstapp merged 2 commits into
FRRouting:stable/10.6from
opensourcerouting:fix/security_hardening_bgp_10.6

Conversation

@ton31337

Copy link
Copy Markdown
Member

No description provided.

Just to avoid randomly killing bgpd daemon with a malformed packet.

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
Adding just a guard against the memory going crazy (too much malloc()s) with
legitimate TLVs, but sort of "malformed"/crafted packet.

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
@greptile-apps

greptile-apps Bot commented Apr 28, 2026

Copy link
Copy Markdown

Target branch is not in the allowed branches list.

@frrbot frrbot Bot added the bgp label Apr 28, 2026
@mjstapp
mjstapp merged commit e60e742 into FRRouting:stable/10.6 Apr 28, 2026
33 of 34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants