| commit | e17df688f7064dae1417ce425dd1e4b71d24d63b | |
| author | Patrick McHardy <kaber@trash.net> | |
| Tue, 2 May 2006 21:23:07 +0000 (2 23:23 +0200) | ||
| committer | Linus Torvalds <torvalds@g5.osdl.org> | |
| Wed, 3 May 2006 00:26:39 +0000 (2 17:26 -0700) | ||
| tree | bc631aa05f4fde009ff260fca51005eb9077a203 | treesnapshot (tar.gz zip) |
| parent | ebf34c9b6fcd22338ef764b039b3ac55ed0e297b | commitdiff |
[NETFILTER] SCTP conntrack: fix infinite loop
fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)
Based on patch from Ingo Molnar <mingo@elte.hu>
CVE-2006-1527
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)
Based on patch from Ingo Molnar <mingo@elte.hu>
CVE-2006-1527
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
| net/ipv4/netfilter/ip_conntrack_proto_sctp.c | diffblobblamehistory | |
| net/netfilter/nf_conntrack_proto_sctp.c | diffblobblamehistory |