linux/net/x25
Dan Rosenberg 5ef41308f9 x25: Prevent crashing when parsing bad X.25 facilities
Now with improved comma support.

On parsing malformed X.25 facilities, decrementing the remaining length
may cause it to underflow.  Since the length is an unsigned integer,
this will result in the loop continuing until the kernel crashes.

This patch adds checks to ensure decrementing the remaining length does
not cause it to wrap around.

Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-11-12 12:44:42 -08:00
..
af_x25.c X.25 remove bkl in poll 2010-09-22 13:35:51 -07:00
Kconfig BKL: introduce CONFIG_BKL. 2010-10-21 15:44:13 +02:00
Makefile
sysctl_net_x25.c
x25_dev.c
x25_facilities.c x25: Prevent crashing when parsing bad X.25 facilities 2010-11-12 12:44:42 -08:00
x25_forward.c
x25_in.c memory corruption in X.25 facilities parsing 2010-11-03 18:50:50 -07:00
x25_link.c
x25_out.c
x25_proc.c
x25_route.c
x25_subr.c
x25_timer.c