]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b8a6f10) | patch
SCTP: Validate buffer room when processing sequential chunks
authorVlad Yasevich <vladislav.yasevich@hp.com>
Wed, 5 Sep 2007 19:53:58 +0000 (15:53 -0400)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 26 Sep 2007 05:55:45 +0000 (22:55 -0700)
commit8f64e31360403cd59f883218faddd9e3a0b1f866
tree2d861171a944bb415d3cb0af82544836df1ced3dtree | snapshot
parentb8a6f10528fc9065c3a9a0f9564d720421bf430ccommit | diff
SCTP: Validate buffer room when processing sequential chunks

When we process bundled chunks, we need to make sure that
the skb has the buffer for each header since we assume it's
always there.  Some malicious node can send us something like
DATA + 2 bytes and we'll try to walk off the end refrencing
potentially uninitialized memory.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
net/sctp/inqueue.c diff | blob | history
Linux Kernel Source Tree.