[VPP-1693] ICMPv6 Neighbor Solicitation: malformed packet crash

[vvalderrv]

Description

/vpp/vpp-codenomicon/src/vnet/ip/ip6_neighbor.c:1379 (icmp6_neighbor_solicitation_or_advertisement) assertion `bogus_length == 0' fails

In case payload length is malformed, bogus_length == 1.

I'm attaching an example packet.

Assignee

Jan Cavojsky

Reporter

Jakub Grajciar

Comments

• fivarga89 (Tue, 26 Nov 2019 09:16:23 +0000): The packet should be dropped ICMP6_NEIGHBOR_SOLICITATION_NEXT_DROP. All maformed packets should be dropped.
• jan_cavojsky (Fri, 19 Jul 2019 13:42:54 +0000):

  In code, is functionality that terminates the program under some conditions of a malformed packet. The program does not crash, but normally ends using a command.

The question is how it should behave in the right way.

• jgallo (Wed, 10 Jul 2019 14:12:06 +0000): could not reproduce

Original issue: https://jira.fd.io/browse/VPP-1693