From 7e7629499fdbe88b7327a7db194214840769779f Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 12 May 2026 16:59:16 +0200 Subject: [PATCH] receiver: Avoid unaligned memory access in COOKIE verification This access could be an issue on platforms with strict alignment requirements. --- src/libcharon/network/receiver.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/network/receiver.c b/src/libcharon/network/receiver.c index 480d1d622..51342ce8c 100644 --- a/src/libcharon/network/receiver.c +++ b/src/libcharon/network/receiver.c @@ -281,7 +281,7 @@ static bool check_cookie(private_receiver_t *this, message_t *message) IKE_HEADER_LENGTH + NOTIFY_PAYLOAD_HEADER_LENGTH + sizeof(uint32_t) + this->hasher->get_hash_size(this->hasher) || *(data.ptr + 16) != PLV2_NOTIFY || - *(uint16_t*)(data.ptr + IKE_HEADER_LENGTH + 6) != htons(COOKIE)) + untoh16(data.ptr + IKE_HEADER_LENGTH + 6) != COOKIE) { /* no cookie found */ return FALSE;