When skipping the address parameter, take the padding into account.

MFC after:		3 days
This commit is contained in:
Michael Tuexen 2019-10-03 20:47:57 +00:00
parent 94a5245c4c
commit aac50dab6d

View File

@ -699,8 +699,8 @@ sctp_handle_asconf(struct mbuf *m, unsigned int offset,
sctp_m_freem(m_ack);
return;
}
/* param_length is already validated in process_control... */
offset += ntohs(p_addr->ph.param_length); /* skip lookup addr */
/* skip lookup addr */
offset += SCTP_SIZE32(ntohs(p_addr->ph.param_length));
/* get pointer to first asconf param in ASCONF */
aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *)&aparam_buf);
if (aph == NULL) {