From e26538dd04ef3a0fa1582ff3be4ec1ec5c9a4178 Mon Sep 17 00:00:00 2001
From: Vito Caputo <vcaputo@pengaru.com>
Date: Mon, 6 Jul 2020 00:36:51 -0700
Subject: [PATCH] network: tc: fix n_prio bounds check

Looks like a simple copy and paste error

Fixes https://github.com/systemd/systemd/issues/16367
---
 src/network/tc/ets.c                         |   2 +-
 test/fuzz/fuzz-network-parser/oss-fuzz-23895 | Bin 0 -> 2395 bytes
 2 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 test/fuzz/fuzz-network-parser/oss-fuzz-23895

diff --git a/src/network/tc/ets.c b/src/network/tc/ets.c
index c4fa5646dd..83e9d8bff3 100644
--- a/src/network/tc/ets.c
+++ b/src/network/tc/ets.c
@@ -283,7 +283,7 @@ int config_parse_ets_prio(
                                    lvalue, word);
                         continue;
                 }
-                if (ets->n_quanta > TC_PRIO_MAX) {
+                if (ets->n_prio > TC_PRIO_MAX) {
                         log_syntax(unit, LOG_ERR, filename, line, 0,
                                    "Too many priomap in '%s=', ignoring assignment: %s",
                                    lvalue, word);
diff --git a/test/fuzz/fuzz-network-parser/oss-fuzz-23895 b/test/fuzz/fuzz-network-parser/oss-fuzz-23895
new file mode 100644
index 0000000000000000000000000000000000000000..a86361d0b3b1d1206695c49e68c72be3cef80f86
GIT binary patch
literal 2395
zcmeHJ?{3pD5a+Xb13sPjQxIzGB;6?6ln?7f)k*DW=~{%^A*{sSqP9tK+)WjqcoUw0
zm*WLEJ4pvqH#!N>kZ2{_7u)CG{qF3$&i=uE6e*Eq0qLwC-@8x5RD?QCllP>{l}L0z
zT0DuSA|MUyacf_zIMlh&LBa9rUVZEGQyi)^OQj~g1yA&1)>vwR+XgC5Rjl#w-40Lq
zsW=w1d8)Wtu0S<Z%A=5Hc;@I;a>kQTM8}FJ*(}a7gw!vwoos~dW+2NBp9kbqOYrk$
zE7n>l>Qj$&g;0S<{Th8ix-O0>^$q4-Qo_9bu%w`yQ(#Z-Re_D&h+zkB`)vl11m=JP
zF5uJ{7y}6upvR;(4fIfQz{6Rb!L?G3j)cBQ)dWAIe61po#SZodemRN>q{_K4C<>fS
zc#J@$M=jRMHVhEtmTf^kH;XK09F#k5u&mVS%BK|B0yJM@mjw<~3|Z?5r0`_Nx6=%&
z1!I86)?wgb_c6!nK(YdDA-D|n<@}Z_9LV*cyKq+Gf96uzq@HO}Lccuo;GF@&;2cQ+
z_U+5(ufQ%{R%n&1Dgjtx?Jrzy&oesqtmmzW?g#dO!3V2+&qJN3W{-&n#BRBTHQY)l
zxV?o@XzNe@S?S2Vxv75&Cm9ZF#@a_$NL-=41+>3=J??HOo1oh`oVR_?-+5WS6>Gz}
zX0OHF2<QLt{M(;<jFn%!s}Jq#o9B{>x#w4MiM`DK=#BoNvKa%`Ihf+(DQ0(D_gt5|
z^MZn?bb&R&sQ<<}d_6oN!&vDBpEehXt%z*Z)SsuRJUA2KBp|~!J35Rod$+#>FY8nY

literal 0
HcmV?d00001