Skip to content

bgpd: Add some defences for AS4/ENCAP handling (backport #21777) - #21792

Merged
mjstapp merged 2 commits into
FRRouting:stable/10.4from
opensourcerouting:fix/security_hardening_bgp_10.4
Apr 28, 2026
Merged

bgpd: Add some defences for AS4/ENCAP handling (backport #21777)#21792
mjstapp merged 2 commits into
FRRouting:stable/10.4from
opensourcerouting:fix/security_hardening_bgp_10.4

Conversation

@ton31337

Copy link
Copy Markdown
Member

No description provided.

Just to avoid randomly killing bgpd daemon with a malformed packet.

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
Adding just a guard against the memory going crazy (too much malloc()s) with
legitimate TLVs, but sort of "malformed"/crafted packet.

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
@greptile-apps

greptile-apps Bot commented Apr 28, 2026

Copy link
Copy Markdown

Target branch is not in the allowed branches list.

@frrbot frrbot Bot added the bgp label Apr 28, 2026
@mjstapp
mjstapp merged commit bd8b841 into FRRouting:stable/10.4 Apr 28, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants