]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b38e735) | patch
batman-adv: verify tt len does not exceed packet len
authorMarek Lindner <lindner_marek@yahoo.de>
Mon, 4 Mar 2013 02:39:49 +0000 (10:39 +0800)
committerAntonio Quartulli <ordex@autistici.org>
Mon, 11 Mar 2013 21:59:47 +0000 (22:59 +0100)
commit71916228487de32140b2d8cedb6c87f0ba04251e
treec23e5fb025c23fc7a19a0c5fdf4fdcd411596a9ftree | snapshot
parentb38e735729ce73062144a1116f7269ebdec5d474commit | diff
batman-adv: verify tt len does not exceed packet len

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
net/batman-adv/bat_iv_ogm.c diff | blob | history
Linux Kernel Source Tree.