diff options
Diffstat (limited to 'src/vnet/ip/ip_frag.c')
| -rw-r--r-- | src/vnet/ip/ip_frag.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/vnet/ip/ip_frag.c b/src/vnet/ip/ip_frag.c index fba25fffff7..1207ec54b49 100644 --- a/src/vnet/ip/ip_frag.c +++ b/src/vnet/ip/ip_frag.c @@ -85,6 +85,12 @@ ip4_frag_do_fragment (vlib_main_t * vm, u32 pi, u32 ** buffer, return; } + if (p->flags & VLIB_BUFFER_NEXT_PRESENT) + { + *error = IP_FRAG_ERROR_MALFORMED; + return; + } + if (ip4_is_fragment (ip4)) { ip_frag_id = ip4->fragment_id; @@ -342,6 +348,12 @@ ip6_frag_do_fragment (vlib_main_t * vm, u32 pi, u32 ** buffer, return; } + if (p->flags & VLIB_BUFFER_NEXT_PRESENT) + { + *error = IP_FRAG_ERROR_MALFORMED; + return; + } + u8 has_more; u16 initial_offset; if (*next_header == IP_PROTOCOL_IPV6_FRAGMENTATION) |