[NETFILTER] SCTP conntrack: fix infinite loop
commite17df688f7064dae1417ce425dd1e4b71d24d63b
authorPatrick McHardy <kaber@trash.net>
Tue, 2 May 2006 21:23:07 +0000 (2 23:23 +0200)
committerLinus Torvalds <torvalds@g5.osdl.org>
Wed, 3 May 2006 00:26:39 +0000 (2 17:26 -0700)
treebc631aa05f4fde009ff260fca51005eb9077a203
parentebf34c9b6fcd22338ef764b039b3ac55ed0e297b
[NETFILTER] SCTP conntrack: fix infinite loop

fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)

Based on patch from Ingo Molnar <mingo@elte.hu>

CVE-2006-1527

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
net/ipv4/netfilter/ip_conntrack_proto_sctp.c
net/netfilter/nf_conntrack_proto_sctp.c