]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()
authorPatrick McHardy <kaber@trash.net>
Thu, 7 Jan 2010 17:33:18 +0000 (18:33 +0100)
committerPatrick McHardy <kaber@trash.net>
Thu, 7 Jan 2010 17:33:18 +0000 (18:33 +0100)
commitf9668c2f90e19296cc18ca64871b1665d723449c
tree54b592b3a7f05517a6ce9854c07b7f5b959d36fb
parent003c9aa06da36528e26728ae2995fa3cbddaa281
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()

As noticed by Dan Carpenter <error27@gmail.com>, update_nl_seq()
currently contains an out of bounds read of the seq_aft_nl array
when looking for the oldest sequence number position.

Fix it to only compare valid positions.

Cc: stable@kernel.org
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/netfilter/nf_conntrack_ftp.c