]> git.baikalelectronics.ru Git - kernel.git/commit
[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values
authorJing Min Zhao <zhaojingmin@vivecode.com>
Fri, 6 Jul 2007 00:05:01 +0000 (17:05 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Fri, 6 Jul 2007 00:40:23 +0000 (17:40 -0700)
commit50aa72a1946d004b45313a39ba601ca81f2a22e2
tree3afe286f19bd8af561ab6131914fb0df8c5ab862
parentc44fdfc2c99b53cd3c6ce763f23cc97bc0198019
[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values

Choices' index values may be out of range while still encoded in the fixed
length bit-field. This bug may cause access to undefined types (NULL
pointers) and thus crashes (Reported by Zhongling Wen).

This patch also adds checking of decode flag when decoding SEQUENCEs.

Signed-off-by: Jing Min Zhao <zhaojingmin@vivecode.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netfilter/nf_conntrack_h323_asn1.c