]> git.baikalelectronics.ru Git - kernel.git/commit
batman-adv: verify tt len does not exceed packet len
authorMarek Lindner <lindner_marek@yahoo.de>
Mon, 4 Mar 2013 02:39:49 +0000 (10:39 +0800)
committerAntonio Quartulli <ordex@autistici.org>
Mon, 11 Mar 2013 21:59:47 +0000 (22:59 +0100)
commit71916228487de32140b2d8cedb6c87f0ba04251e
treec23e5fb025c23fc7a19a0c5fdf4fdcd411596a9f
parentb38e735729ce73062144a1116f7269ebdec5d474
batman-adv: verify tt len does not exceed packet len

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
net/batman-adv/bat_iv_ogm.c