]> Git Repo - linux.git/commit - net/ipv6/ip6mr.c
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e7d481a) | patch
net: ipmr/ip6mr: prevent out-of-bounds vif_table access
authorNicolas Dichtel <[email protected]>
Thu, 25 Mar 2010 23:45:35 +0000 (23:45 +0000)
committerDavid S. Miller <[email protected]>
Sat, 27 Mar 2010 15:33:21 +0000 (08:33 -0700)
commit7438189baa0a2fe30084bdc97e3d540ebc5444f3
tree6627b63b785df9175e04a0ce1b49d5eea8ea0777tree | snapshot
parente7d481a6f3c13041446b7bb8f98ab861460076a3commit | diff
net: ipmr/ip6mr: prevent out-of-bounds vif_table access

When cache is unresolved, c->mf[6]c_parent is set to 65535 and
minvif, maxvif are not initialized, hence we must avoid to
parse IIF and OIF.
A second problem can happen when the user dumps a cache entry
where a VIF, that was referenced at creation time, has been
removed.

Signed-off-by: Nicolas Dichtel <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
net/ipv4/ipmr.c diff | blob | blame | history
net/ipv6/ip6mr.c diff | blob | blame | history
Empty description
This page took 0.052683 seconds and 4 git commands to generate.