linux/net/sctp
Wei Yongjun dadb50cc1a sctp: fix check the chunk length of received HEARTBEAT-ACK chunk
The receiver of the HEARTBEAT should respond with a HEARTBEAT ACK
that contains the Heartbeat Information field copied from the
received HEARTBEAT chunk. So the received HEARTBEAT-ACK chunk
must have a length of:
  sizeof(sctp_chunkhdr_t) + sizeof(sctp_sender_hb_info_t)

A badly formatted HB-ACK chunk, it is possible that we may access
invalid memory.  We should really make sure that the chunk format
is what we expect, before attempting to touch the data.

Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
2009-09-04 18:20:58 -04:00
..
associola.c sctp: release cached route when the transport goes down. 2009-09-04 18:20:55 -04:00
auth.c
bind_addr.c
chunk.c sctp: Send user messages to the lower layer as one 2009-09-04 18:20:57 -04:00
command.c
debug.c
endpointola.c
input.c
inqueue.c
ipv6.c
Kconfig
Makefile
objcnt.c
output.c sctp: Generate SACKs when actually sending outbound DATA 2009-09-04 18:20:56 -04:00
outqueue.c
primitive.c
proc.c
protocol.c
sm_make_chunk.c sctp: update the route for non-active transports after addresses are added 2009-09-04 18:20:55 -04:00
sm_sideeffect.c sctp: Send user messages to the lower layer as one 2009-09-04 18:20:57 -04:00
sm_statefuns.c sctp: fix check the chunk length of received HEARTBEAT-ACK chunk 2009-09-04 18:20:58 -04:00
sm_statetable.c
socket.c sctp: Send user messages to the lower layer as one 2009-09-04 18:20:57 -04:00
ssnmap.c
sysctl.c
transport.c
tsnmap.c
ulpevent.c
ulpqueue.c