git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 328fc47) | patch
sctp: fix random memory dereference with SCTP_HMAC_IDENT option.
authorVlad Yasevich <vladislav.yasevich@hp.com>
Wed, 27 Aug 2008 23:09:49 +0000 (16:09 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 27 Aug 2008 23:09:49 +0000 (16:09 -0700)
commitd97240552cd98c4b07322f30f66fd9c3ba4171de
tree61a8fd1ace711bcf2c832d0c453d8fbf6f8f3003tree | snapshot
parent328fc47ea0bcc27d9afa69c3ad6e52431cadd76ccommit | diff
sctp: fix random memory dereference with SCTP_HMAC_IDENT option.

The number of identifiers needs to be checked against the option
length.  Also, the identifier index provided needs to be verified
to make sure that it doesn't exceed the bounds of the array.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sctp/auth.c diff | blob | history
net/sctp/socket.c diff | blob | history
Full containers within linux kernel