tree 389ada1e65127e552ef730f6d216280826760a8d
parent ffad574a4b68596d17671965bf145f11f0b00e57
author Stefan Sperling <ssperling@sysmocom.de> 1515435602 +0100
committer Harald Welte <laforge@gnumonks.org> 1515764939 +0000

TLVP_PRESENT() should not return TRUE after tlv_parse() fails.

If the length provided in the patcket exceeds the buffer length,
tlv_parse() returns -2 but leaves tlv.val and tlv.len initializd.

Many callers of tlv_parse() do not check its return value, but
rely on TLVP_PRESENT() to see if a particular TLV was parsed
successfully. By clearing tlv.val and tlv.len we make it less
likely that those callers will use an overlong TLV length value.

Change-Id: I4dda6938e1650b4bcaac45809a4763f86f5a9794