git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ca9938f) | patch
SCTP: Validate buffer room when processing sequential chunks
authorVlad Yasevich <vladislav.yasevich@hp.com>
Wed, 5 Sep 2007 19:53:58 +0000 (15:53 -0400)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 26 Sep 2007 05:55:45 +0000 (22:55 -0700)
commita09c83847b664dcd67a72613374061c900afb799
tree2d861171a944bb415d3cb0af82544836df1ced3dtree | snapshot
parentca9938fea576ebbb8d8c4fbe8a5bcc937e49e1cacommit | diff
SCTP: Validate buffer room when processing sequential chunks

When we process bundled chunks, we need to make sure that
the skb has the buffer for each header since we assume it's
always there.  Some malicious node can send us something like
DATA + 2 bytes and we'll try to walk off the end refrencing
potentially uninitialized memory.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
net/sctp/inqueue.c diff | blob | history
Pandora Kernel Repository