diff options
| author | Vlad Yasevich <vladislav.yasevich@hp.com> | 2007-09-05 15:53:58 -0400 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2007-09-25 22:55:45 -0700 |
| commit | a09c83847b664dcd67a72613374061c900afb799 (patch) | |
| tree | 2d861171a944bb415d3cb0af82544836df1ced3d /net/tipc/ref.c | |
| parent | ca9938fea576ebbb8d8c4fbe8a5bcc937e49e1ca (diff) | |
SCTP: Validate buffer room when processing sequential chunks
When we process bundled chunks, we need to make sure that
the skb has the buffer for each header since we assume it's
always there. Some malicious node can send us something like
DATA + 2 bytes and we'll try to walk off the end refrencing
potentially uninitialized memory.
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Diffstat (limited to 'net/tipc/ref.c')
0 files changed, 0 insertions, 0 deletions