diff options
| author | Tamir Duberstein <tamird@google.com> | 2019-07-12 16:17:18 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2019-07-12 16:19:18 -0700 |
| commit | 17bab652afebdc43d77969431b9147cca039f61e (patch) | |
| tree | f9bbcbf019be64a95d0a1164dc75029e61abc442 /pkg/tcpip | |
| parent | c8ae00eb8aec51d09d688f05ea86674bc5449f8f (diff) | |
Check that IP headers contain correct version
PiperOrigin-RevId: 257888338
Diffstat (limited to 'pkg/tcpip')
| -rw-r--r-- | pkg/tcpip/header/ipv4.go | 4 | ||||
| -rw-r--r-- | pkg/tcpip/header/ipv6.go | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/pkg/tcpip/header/ipv4.go b/pkg/tcpip/header/ipv4.go index 7b8034de4..94a3af289 100644 --- a/pkg/tcpip/header/ipv4.go +++ b/pkg/tcpip/header/ipv4.go @@ -272,6 +272,10 @@ func (b IPv4) IsValid(pktSize int) bool { return false } + if IPVersion(b) != IPv4Version { + return false + } + return true } diff --git a/pkg/tcpip/header/ipv6.go b/pkg/tcpip/header/ipv6.go index 7163eaa36..95fe8bfc3 100644 --- a/pkg/tcpip/header/ipv6.go +++ b/pkg/tcpip/header/ipv6.go @@ -184,6 +184,10 @@ func (b IPv6) IsValid(pktSize int) bool { return false } + if IPVersion(b) != IPv6Version { + return false + } + return true } |