zehome / MLVPN

Multi-link VPN (ADSL/SDSL/xDSL/Network aggregation / bonding)
http://www.mlvpn.fr/
BSD 2-Clause "Simplified" License
518 stars 127 forks source link

use of wlen #92

Closed markfoodyburton closed 7 years ago

markfoodyburton commented 7 years ago

Looks to me like the code around https://github.com/zehome/MLVPN/blob/master/src/mlvpn.c#L550 should be using the pkt->len, not the wlen? Looks to me like, worst case, this could cause memory corruptions (though, at a guess, we never see it because typically the MTU is set low enough?)

Cheers Mark.

zehome commented 7 years ago

HMm, seems you are right

markfoodyburton commented 7 years ago

I can try and clean my tree up, and get some patches to you, but it may take a while...

zehome commented 7 years ago

I'll address that issue