]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 56ca96b) | patch
[NETFILTER] SCTP conntrack: fix infinite loop
authorPatrick McHardy <kaber@trash.net>
Tue, 2 May 2006 21:23:07 +0000 (23:23 +0200)
committerLinus Torvalds <torvalds@g5.osdl.org>
Wed, 3 May 2006 00:26:39 +0000 (17:26 -0700)
commita12f763a08fee91b6d2237174bacab01a92eb4b8
treebc631aa05f4fde009ff260fca51005eb9077a203tree | snapshot
parent56ca96bc9328072241047a60f6b4df9d2cc722c6commit | diff
[NETFILTER] SCTP conntrack: fix infinite loop

fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)

Based on patch from Ingo Molnar <mingo@elte.hu>

CVE-2006-1527

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
net/ipv4/netfilter/ip_conntrack_proto_sctp.c diff | blob | history
net/netfilter/nf_conntrack_proto_sctp.c diff | blob | history
Linux Kernel Source Tree.