View | Details | Raw Unified
Collapse All | Expand All

(-) src/racoon/isakmp.c (-1 / +1 lines)
 Lines 1352-1358    Link Here  

        
		p->type = np;
		p->type = np;

        
		p->len = ntohs(gen->len);
		p->len = ntohs(gen->len);

            

              
		if (p->len == 0 || p->len > tlen) {

              
		if (p->len < sizeof(struct isakmp_gen) || p->len > tlen) {

            

        
			plog(LLV_DEBUG, LOCATION, NULL,
			plog(LLV_DEBUG, LOCATION, NULL,

        
				"invalid length of payload\n");
				"invalid length of payload\n");

        
			vfree(result);
			vfree(result);