aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/tcp_ipv4.c
diff options
context:
space:
mode:
authorDan Rosenberg <drosenberg@vsecurity.com>2010-11-12 15:44:42 -0500
committerDavid S. Miller <davem@davemloft.net>2010-11-12 15:44:42 -0500
commit5ef41308f94dcbb3b7afc56cdef1c2ba53fa5d2f (patch)
treec21d9c1c7f2792b0889432988d42e9b90f953358 /net/ipv4/tcp_ipv4.c
parente68e6133e2daef6fc40e91621a1e26938e428e9e (diff)
x25: Prevent crashing when parsing bad X.25 facilities
Now with improved comma support. On parsing malformed X.25 facilities, decrementing the remaining length may cause it to underflow. Since the length is an unsigned integer, this will result in the loop continuing until the kernel crashes. This patch adds checks to ensure decrementing the remaining length does not cause it to wrap around. Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/tcp_ipv4.c')
0 files changed, 0 insertions, 0 deletions