19c19
< *
---
> *
21c21
< *
---
> *
231a232
> (fp->DecodeConfig)(option, count, MODE_NOP);
242a244
> (fp->DecodeConfig)(option, count, MODE_NOP);
254a257
> (fp->DecodeConfig)(option, count, MODE_NOP);
321c324
< int plen;
---
> int plen, flen;
325,326c328,330
< if (plen < sizeof(struct fsmconfig)) {
< logprintf("** plen = %d\n", plen);
---
> flen = ntohs(lhp->length) - sizeof(*lhp);
> if (plen < flen) {
> logprintf("** plen (%d) < flen (%d)\n", plen, flen);
330a335
>
352c357
< (fp->DecodeConfig)(bp, MODE_REQ);
---
> (fp->DecodeConfig)(MBUF_CTOP(bp), flen, MODE_REQ);
443c448
< int plen;
---
> int plen, flen;
446c451,452
< if (plen < sizeof(struct fsmconfig)) {
---
> flen = ntohs(lhp->length) - sizeof(*lhp);
> if (plen < flen) {
472c478
< (fp->DecodeConfig)(bp, MODE_NAK);
---
> (fp->DecodeConfig)(MBUF_CTOP(bp), flen, MODE_NAK);
559c565
< int plen;
---
> int plen, flen;
562c568,569
< if (plen < sizeof(struct fsmconfig)) {
---
> flen = ntohs(lhp->length) - sizeof(*lhp);
> if (plen < flen) {
589c596
< (fp->DecodeConfig)(bp, MODE_REJ);
---
> (fp->DecodeConfig)(MBUF_CTOP(bp), flen, MODE_REJ);
794c801
< fp->name, codep->name, lhp->code, StateNames[fp->state], fp->state);
---
> fp->name, codep->name, lhp->id, StateNames[fp->state], fp->state);