-fix access out of bounds, struct sockaddr_in6 is not the same as struct in6_addr, and we are just comparing the IPv6 IP here, not the rest

1 files changed, 3 insertions, 2 deletions

diff --git a/src/setup/gnunet-setup-transport.c b/src/setup/gnunet-setup-transport.c
index 08cc39d9..e593ed2f 100644
--- a/src/setup/gnunet-setup-transport.c
+++ b/src/setup/gnunet-setup-transport.c
@@ -340,8 +340,9 @@ nipo (void *cls, const char *name, int isDefault, const struct sockaddr *addr,
   if (!isDefault)
     return GNUNET_OK;
   if ( (sizeof (struct sockaddr_in6) == addrlen) &&
-       (0 != memcmp (&in6addr_loopback, addr,
-                     addrlen)) &&
+       (0 != memcmp (&in6addr_loopback,
+                     &((struct sockaddr_in6 *)addr)->sin6_addr,
+                     sizeof (struct in6_addr))) &&
        (! IN6_IS_ADDR_LINKLOCAL(addr)) )
   {
     *have_v6 = GNUNET_YES;