| commit | a09c83847b664dcd67a72613374061c900afb799 | [log] [tgz] |
|---|---|---|
| author | Vlad Yasevich <vladislav.yasevich@hp.com> | Wed Sep 05 15:53:58 2007 -0400 |
| committer | David S. Miller <davem@sunset.davemloft.net> | Tue Sep 25 22:55:45 2007 -0700 |
| tree | 2d861171a944bb415d3cb0af82544836df1ced3d | |
| parent | ca9938fea576ebbb8d8c4fbe8a5bcc937e49e1ca [diff] |
SCTP: Validate buffer room when processing sequential chunks When we process bundled chunks, we need to make sure that the skb has the buffer for each header since we assume it's always there. Some malicious node can send us something like DATA + 2 bytes and we'll try to walk off the end refrencing potentially uninitialized memory. Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>