tree e90971963d56ec99cd0d1f2fd3d2b6fcfb2d6ef5
parent 061e7371a944588f231cb1b66d6fb070b646e376
author Guy Harris <guy@alum.mit.edu> 1503547722 -0700
committer Denis Ovsienko <denis@ovsienko.info> 1505301944 +0100

CVE-2017-13690/IKEv2: Fix some bounds checks.

Use a pointer of the correct type in ND_TCHECK(), or use ND_TCHECK2()
and provide the correct length.

While we're at it, remove the blank line between some checks and the
UNALIGNED_MEMCPY()s they protect.

Also, note the places where we print the entire payload.

This fixes a buffer over-read discovered by Bhargava Shastry,
SecT/TU Berlin.

Add a test using the capture file supplied by the reporter(s).