From: Dan Rosenberg Date: Fri, 1 Oct 2010 11:16:58 +0000 (+0000) Subject: sctp: prevent reading out-of-bounds memory X-Git-Tag: v2.6.36-rc8~17^2~14 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d7e0d19aa0fdd22819d35db551bd54c1bcf9c2aa;p=pandora-kernel.git sctp: prevent reading out-of-bounds memory Two user-controlled allocations in SCTP are subsequently dereferenced as sockaddr structs, without checking if the dereferenced struct members fall beyond the end of the allocated chunk. There doesn't appear to be any information leakage here based on how these members are used and additional checking, but it's still worth fixing. [akpm@linux-foundation.org: remove unfashionable newlines, fix gmail tab->space conversion] Signed-off-by: Dan Rosenberg Acked-by: Vlad Yasevich Cc: David Miller Signed-off-by: Andrew Morton Signed-off-by: David S. Miller --- Reading git-diff-tree failed