diff options
| author | Nicolas Dichtel <[email protected]> | 2010-03-25 23:45:35 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2010-03-27 08:33:21 -0700 |
| commit | 7438189baa0a2fe30084bdc97e3d540ebc5444f3 (patch) | |
| tree | 6627b63b785df9175e04a0ce1b49d5eea8ea0777 /net/lapb/lapb_in.c | |
| parent | e7d481a6f3c13041446b7bb8f98ab861460076a3 (diff) | |
net: ipmr/ip6mr: prevent out-of-bounds vif_table access
When cache is unresolved, c->mf[6]c_parent is set to 65535 and
minvif, maxvif are not initialized, hence we must avoid to
parse IIF and OIF.
A second problem can happen when the user dumps a cache entry
where a VIF, that was referenced at creation time, has been
removed.
Signed-off-by: Nicolas Dichtel <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/lapb/lapb_in.c')
0 files changed, 0 insertions, 0 deletions