git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ebf34c9) | patch
[NETFILTER] SCTP conntrack: fix infinite loop
authorPatrick McHardy <kaber@trash.net>
Tue, 2 May 2006 21:23:07 +0000 (23:23 +0200)
committerLinus Torvalds <torvalds@g5.osdl.org>
Wed, 3 May 2006 00:26:39 +0000 (17:26 -0700)
commite17df688f7064dae1417ce425dd1e4b71d24d63b
treebc631aa05f4fde009ff260fca51005eb9077a203tree | snapshot
parentebf34c9b6fcd22338ef764b039b3ac55ed0e297bcommit | diff
[NETFILTER] SCTP conntrack: fix infinite loop

fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)

Based on patch from Ingo Molnar <mingo@elte.hu>

CVE-2006-1527

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
net/ipv4/netfilter/ip_conntrack_proto_sctp.c diff | blob | history
net/netfilter/nf_conntrack_proto_sctp.c diff | blob | history
Full containers within linux kernel