When processing a bundle, if the bundle is to be forwarded, the process function builds up an exclude list of excluded blocks. Currently, the maximum number of excluded blocks is 8, but there is no check in the code against that number which leaves the code open to a buffer overflow.
When processing a bundle, if the bundle is to be forwarded, the process function builds up an exclude list of excluded blocks. Currently, the maximum number of excluded blocks is 8, but there is no check in the code against that number which leaves the code open to a buffer overflow.