According to the flowspec RFC 8955 a flowspec nlri is <length, <nlri data>>
Specifying 0 as a length makes BGP get all warm on the inside. Which
in this case is not a good thing at all. Prevent warmth, stay cold
on the inside.
Reported-by: Iggy Frankovic <email address hidden>
Signed-off-by: Donald Sharp <email address hidden>
(cherry picked from commit 0b999c886e241c52bd1f7ef0066700e4b618ebb3)
lib: Allow downgrade of all caps when none are specified
Staticd when run tells privs.c that it does not need any
priviledges. The lib/privs.c code was not downgrading
any and all permissions it may have been given at startup.
Since we don't need any let's actually tell the system that
FRR does not need the capabilities anymore in the case
where a daemon does not ask for any cap's.
Signed-off-by: Donald Sharp <email address hidden>
(cherry picked from commit 88be4045c9e09d9b36952ed594e4bbc19633deba)
1cd828e...
by
Donatas Abraitis <email address hidden>
Merge pull request #11383 from FRRouting/mergify/bp/stable/8.1/pr-11089
build: fix new gcc 11.2 warnings (backport #11089)
91449e2...
by
David Lamparter <email address hidden>
build: fix new gcc 11.2 warnings
Some recent improvement in GCC triggers 2 new warnings, and they're
actual bugs (reading beyond end of prefix_ipv6 by accessing it as
prefix, which is larger.) Luckily it's only in sharpd.
Signed-off-by: David Lamparter <email address hidden>
(cherry picked from commit 5c7a6fb36c0cf8113c19af7354782838988b263b)
