nm-l2tp / NetworkManager-l2tp

L2TP and L2TP/IPsec support for NetworkManager
GNU General Public License v2.0
486 stars 83 forks source link

properties: fix possible out-of-bounds access in export_ip4 #196

Closed makiftasova closed 1 year ago

makiftasova commented 1 year ago

When exporting static routes configured for VPN connection, export_ip4 function uses num_dns instead of num_routes variable, which may cause out-of-bounds access to routes array.

This issue surfaces itself as double free or corruption error in my case.