[NETFILTER]: Fix crash in ip_nat_pptp
authorPatrick McHardy <kaber@trash.net>
Tue, 10 Jan 2006 00:43:43 +0000 (16:43 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Tue, 10 Jan 2006 20:54:30 +0000 (12:54 -0800)
When an inbound PPTP_IN_CALL_REQUEST packet is received the
PPTP NAT helper uses a NULL pointer in pointer arithmentic to
calculate the offset in the packet which needs to be mangled
and corrupts random memory or crashes.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

No differences found