add missing cast when validating tcp header length that they actually

gasbytes · danielinux · commit 175e41d313bc · 2026-02-09T09:55:13.000+01:00
fits in the ip payload
diff --git a/src/wolfip.c b/src/wolfip.c
@@ -2000,7 +2000,7 @@ static void tcp_input(struct wolfIP *S, unsigned int if_idx, struct wolfIP_tcp_s
                 return;
             }
             /* Validate TCP header length fits in IP payload */
-            if (iplen < IP_HEADER_LEN + (tcp->hlen >> 2)) {
+            if (iplen < (uint32_t)(IP_HEADER_LEN + (tcp->hlen >> 2))) {
                 return; /* malformed: TCP header exceeds IP length */
             }
             tcplen = iplen - (IP_HEADER_LEN + (tcp->hlen >> 2));

Original file line number	Diff line number	Diff line change
`@@ -2000,7 +2000,7 @@ static void tcp_input(struct wolfIP *S, unsigned int if_idx, struct wolfIP_tcp_s`
`2000`	`2000`	`return;`
`2001`	`2001`	`}`
`2002`	`2002`	`/* Validate TCP header length fits in IP payload */`
`2003`		`- if (iplen < IP_HEADER_LEN + (tcp->hlen >> 2)) {`
	`2003`	`+ if (iplen < (uint32_t)(IP_HEADER_LEN + (tcp->hlen >> 2))) {`
`2004`	`2004`	`return; /* malformed: TCP header exceeds IP length */`
`2005`	`2005`	`}`
`2006`	`2006`	`tcplen = iplen - (IP_HEADER_LEN + (tcp->hlen >> 2));`