Files
linux/net
Jozsef Kadlecsik 4a5cc84ae7 netfilter: nf_ct_tcp: fix incorrect handling of invalid TCP option
Michael M. Builov reported that in the tcp_options and tcp_sack functions
of netfilter TCP conntrack the incorrect handling of invalid TCP option
with too big opsize may lead to read access beyond tcp-packet or buffer
allocated on stack (netfilter bugzilla #738). The fix is to stop parsing
the options at detecting the broken option.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2011-08-30 15:45:10 +02:00
..
2011-07-23 09:32:52 -05:00
2011-05-23 16:29:24 -04:00
2011-07-26 16:49:47 -07:00
…
2011-07-26 16:49:47 -07:00
…
2011-07-26 16:49:47 -07:00
2011-06-16 23:19:27 -04:00
2011-07-01 16:11:16 -07:00
…
2011-07-26 16:49:47 -07:00
2011-07-01 16:11:16 -07:00
2011-07-05 15:26:58 -04:00
2011-07-26 16:49:47 -07:00
2011-07-01 16:11:16 -07:00
…
2011-07-05 15:26:57 -04:00
2011-07-05 15:26:57 -04:00
…