linux/net/batman-adv
Marek Lindner b47506d912 batman-adv: verify tt len does not exceed packet len
batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
2013-03-11 22:59:47 +01:00
..
Kconfig batman-adv: Add function to calculate crc32c for the skb payload 2012-11-21 12:35:41 +01:00
Makefile batman-adv: Distributed ARP Table - add compile option 2012-11-07 20:00:22 +01:00
bat_algo.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
bat_iv_ogm.c batman-adv: verify tt len does not exceed packet len 2013-03-11 22:59:47 +01:00
bitarray.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
bitarray.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
bridge_loop_avoidance.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
bridge_loop_avoidance.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
debugfs.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
debugfs.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
distributed-arp-table.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
distributed-arp-table.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
gateway_client.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
gateway_client.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
gateway_common.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
gateway_common.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
hard-interface.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
hard-interface.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
hash.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
hash.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
icmp_socket.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
icmp_socket.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
main.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
main.h batman-adv: Start new development cycle 2013-01-19 21:18:13 +08:00
originator.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
originator.h hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
packet.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
ring_buffer.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
ring_buffer.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
routing.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
routing.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
send.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
send.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
soft-interface.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
soft-interface.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
sysfs.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
sysfs.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
translation-table.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
translation-table.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
types.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
unicast.c batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
unicast.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00
vis.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
vis.h batman-adv: update copyright years 2013-01-19 21:18:12 +08:00