]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fc48430) | patch
batman-adv: verify tt len does not exceed packet len
authorMarek Lindner <lindner_marek@yahoo.de>
Mon, 4 Mar 2013 02:39:49 +0000 (10:39 +0800)
committerAntonio Quartulli <ordex@autistici.org>
Mon, 11 Mar 2013 21:59:47 +0000 (22:59 +0100)
commitcf336a66c6fbe69bb22ed23335ba0bb6805e9d93
treec23e5fb025c23fc7a19a0c5fdf4fdcd411596a9ftree | snapshot
parentfc484309f14c65b23369359150520e1724770af3commit | diff
batman-adv: verify tt len does not exceed packet len

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
net/batman-adv/bat_iv_ogm.c diff | blob | history
Linux Kernel Source Tree.