PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-25 17:09:02 +00:00
Code Issues Projects Releases Wiki Activity

Fix add_rtattr_addr.

Browse Source 
The second argument to RTA_NEXT was missing a dereference, so it was
changing the pointer rather than the integer pointed to. I got this
assertion failure with an IPv6 link-local address:

nmap: netutil.cc:3048: void add_rtattr_addr(nlmsghdr*, rtattr**, unsigned int*, unsigned char, const sockaddr_storage*): Assertion `((*len) >= (int)sizeof(struct rtattr) && (*rtattr)->rta_len >= sizeof(struct rtattr) && (*rtattr)->rta_len <= (*len))' failed.
This commit is contained in:
david
2012-09-15 17:17:59 +00:00
parent 44c5c227d3
commit e2d17adf9f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libnetutil/netutil.cc
View File

@@ -3035,7 +3035,7 @@ static void add_rtattr_addr(struct nlmsghdr *nlmsg,
assert(RTA_OK(*rtattr, *len));
memcpy(RTA_DATA(*rtattr), addr, addrlen);
nlmsg->nlmsg_len = NLMSG_ALIGN(nlmsg->nlmsg_len) + (*rtattr)->rta_len;
*rtattr = RTA_NEXT(*rtattr, len);
*rtattr = RTA_NEXT(*rtattr, *len);
/* Specific interface (sin6_scope_id) requested? */
if (ifindex > 0) {
@@ -3048,7 +3048,7 @@ static void add_rtattr_addr(struct nlmsghdr *nlmsg,
assert(RTA_OK(*rtattr, *len));
*(uint32_t *) RTA_DATA(*rtattr) = ifindex;
nlmsg->nlmsg_len = NLMSG_ALIGN(nlmsg->nlmsg_len) + (*rtattr)->rta_len;
*rtattr = RTA_NEXT(*rtattr, len);
*rtattr = RTA_NEXT(*rtattr, *len);
}
}