linux/net/x25
Dan Rosenberg 5ef41308f9 x25: Prevent crashing when parsing bad X.25 facilities
Now with improved comma support.

On parsing malformed X.25 facilities, decrementing the remaining length
may cause it to underflow.  Since the length is an unsigned integer,
this will result in the loop continuing until the kernel crashes.

This patch adds checks to ensure decrementing the remaining length does
not cause it to wrap around.

Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-11-12 12:44:42 -08:00
..
af_x25.c X.25 remove bkl in poll 2010-09-22 13:35:51 -07:00
Kconfig BKL: introduce CONFIG_BKL. 2010-10-21 15:44:13 +02:00
Makefile
sysctl_net_x25.c
x25_dev.c X25: Add if_x25.h and x25 to device identifiers 2010-04-22 16:12:36 -07:00
x25_facilities.c x25: Prevent crashing when parsing bad X.25 facilities 2010-11-12 12:44:42 -08:00
x25_forward.c
x25_in.c memory corruption in X.25 facilities parsing 2010-11-03 18:50:50 -07:00
x25_link.c
x25_out.c X25: Move interrupt flag to bitfield 2010-05-17 17:39:27 -07:00
x25_proc.c
x25_route.c
x25_subr.c
x25_timer.c