git.samba.org / sfrench / cifs-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7c6baa3) | patch
batman-adv: verify tt len does not exceed packet len
authorMarek Lindner <lindner_marek@yahoo.de>
Mon, 4 Mar 2013 02:39:49 +0000 (10:39 +0800)
committerAntonio Quartulli <ordex@autistici.org>
Mon, 11 Mar 2013 21:59:47 +0000 (22:59 +0100)
commitb47506d91259c29b9c75c404737eb6525556f9b4
treec23e5fb025c23fc7a19a0c5fdf4fdcd411596a9ftree
parent7c6baa304b841673d3a55ea4fcf9a5cbf7a1674bcommit | diff
batman-adv: verify tt len does not exceed packet len

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>
net/batman-adv/bat_iv_ogm.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.