git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 04bcef2) | patch
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()
authorPatrick McHardy <kaber@trash.net>
Thu, 7 Jan 2010 17:33:18 +0000 (18:33 +0100)
committerPatrick McHardy <kaber@trash.net>
Thu, 7 Jan 2010 17:33:18 +0000 (18:33 +0100)
commitaaff23a95aea5f000895f50d90e91f1e2f727002
tree54b592b3a7f05517a6ce9854c07b7f5b959d36fbtree | snapshot
parent04bcef2a83f40c6db24222b27a52892cba39dffbcommit | diff
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()

As noticed by Dan Carpenter <error27@gmail.com>, update_nl_seq()
currently contains an out of bounds read of the seq_aft_nl array
when looking for the oldest sequence number position.

Fix it to only compare valid positions.

Cc: stable@kernel.org
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/netfilter/nf_conntrack_ftp.c diff | blob | history
Full containers within linux kernel