X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Flibsystemd-network%2Fdhcp-packet.c;h=9779cbd51d0de5de4885887729537a051ed86aa4;hp=418a9773f2e6de07fc1a20a79b09a3c0cd8f23ef;hb=d454a6748c34f0f67eef618238e0a64b80c85303;hpb=63edaa623bee43c934a0c357e8c6498992429391 diff --git a/src/libsystemd-network/dhcp-packet.c b/src/libsystemd-network/dhcp-packet.c index 418a9773f..9779cbd51 100644 --- a/src/libsystemd-network/dhcp-packet.c +++ b/src/libsystemd-network/dhcp-packet.c @@ -69,7 +69,7 @@ int dhcp_message_init(DHCPMessage *message, uint8_t op, uint32_t xid, return 0; } -static uint16_t dhcp_checksum(void *buf, int len) { +uint16_t dhcp_packet_checksum(void *buf, int len) { uint32_t sum; uint16_t *check; int i; @@ -109,11 +109,11 @@ void dhcp_packet_append_ip_headers(DHCPPacket *packet, be32_t source_addr, packet->udp.len = htobe16(len - DHCP_IP_SIZE); packet->ip.check = packet->udp.len; - packet->udp.check = dhcp_checksum(&packet->ip.ttl, len - 8); + packet->udp.check = dhcp_packet_checksum(&packet->ip.ttl, len - 8); packet->ip.ttl = IPDEFTTL; packet->ip.check = 0; - packet->ip.check = dhcp_checksum(&packet->ip, DHCP_IP_SIZE); + packet->ip.check = dhcp_packet_checksum(&packet->ip, DHCP_IP_SIZE); } int dhcp_packet_verify_headers(DHCPPacket *packet, size_t len, bool checksum) { @@ -150,13 +150,18 @@ int dhcp_packet_verify_headers(DHCPPacket *packet, size_t len, bool checksum) { return -EINVAL; } - if (dhcp_checksum(&packet->ip, hdrlen)) { + if (dhcp_packet_checksum(&packet->ip, hdrlen)) { log_dhcp_client(client, "ignoring packet: invalid IP checksum"); return -EINVAL; } /* UDP */ + if (packet->ip.protocol != IPPROTO_UDP) { + log_dhcp_client(client, "ignoring packet: not UDP"); + return -EINVAL; + } + if (len < DHCP_IP_UDP_SIZE) { log_dhcp_client(client, "ignoring packet: packet (%zu bytes) " " smaller than IP+UDP header (%u bytes)", len, @@ -175,7 +180,7 @@ int dhcp_packet_verify_headers(DHCPPacket *packet, size_t len, bool checksum) { packet->ip.check = packet->udp.len; packet->ip.ttl = 0; - if (dhcp_checksum(&packet->ip.ttl, + if (dhcp_packet_checksum(&packet->ip.ttl, be16toh(packet->udp.len) + 12)) { log_dhcp_client(client, "ignoring packet: invalid UDP checksum"); return -EINVAL;