]> Git Repo - linux.git/commit
dccp: check ccid before dereferencing
authorMathias Krause <[email protected]>
Wed, 15 Aug 2012 11:31:54 +0000 (11:31 +0000)
committerDavid S. Miller <[email protected]>
Thu, 16 Aug 2012 04:36:31 +0000 (21:36 -0700)
commit276bdb82dedb290511467a5a4fdbe9f0b52dce6f
tree0882e07c971f4254c5fe07c0e3eefadb8c6cfda0
parent3592aaeb80290bda0f2cf0b5456c97bfc638b192
dccp: check ccid before dereferencing

ccid_hc_rx_getsockopt() and ccid_hc_tx_getsockopt() might be called with
a NULL ccid pointer leading to a NULL pointer dereference. This could
lead to a privilege escalation if the attacker is able to map page 0 and
prepare it with a fake ccid_ops pointer.

Signed-off-by: Mathias Krause <[email protected]>
Cc: Gerrit Renker <[email protected]>
Cc: [email protected]
Signed-off-by: David S. Miller <[email protected]>
net/dccp/ccid.h
This page took 0.061179 seconds and 4 git commands to generate.