X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fodhcpd.git;a=blobdiff_plain;f=src%2Fconfig.c;h=fd334ef2e8a3108697ebcf5e7d0ff2ccf9d7f82b;hp=93489852d7986b31d3a75e60079826556499b2c1;hb=5683dd25da56c66e0a5c86e770b8ee2188ad569c;hpb=a9e9bc4c67ac9fa8aecf5f20954a58093705831b

diff --git a/src/config.c b/src/config.c
index 9348985..fd334ef 100644
--- a/src/config.c
+++ b/src/config.c
@@ -608,8 +608,11 @@ int config_parse_interface(void *data, size_t len, const char *name, bool overwr
 			goto err;
 	}
 
-	if ((c = tb[IFACE_ATTR_RA_RETRANSTIME]))
+	if ((c = tb[IFACE_ATTR_RA_RETRANSTIME])) {
 		iface->ra_retranstime = blobmsg_get_u32(c);
+		if (iface->ra_retranstime > 60000)
+			goto err;
+	}
 
 	if ((c = tb[IFACE_ATTR_RA_HOPLIMIT])) {
 		iface->ra_hoplimit = blobmsg_get_u32(c);
@@ -618,9 +621,11 @@ int config_parse_interface(void *data, size_t len, const char *name, bool overwr
 	}
 
 	if ((c = tb[IFACE_ATTR_RA_MTU])) {
-		iface->ra_mtu = blobmsg_get_u32(c);
-		if (iface->ra_mtu < 1280)
+		uint32_t ra_mtu = blobmsg_get_u32(c);
+		if (ra_mtu < 1280 || ra_mtu > 65535)
 			goto err;
+
+		iface->ra_mtu = ra_mtu;
 	}
 
 	if ((c = tb[IFACE_ATTR_RA_OFFLINK]))