diff options
| author | Mathias Krause <[email protected]> | 2012-08-15 11:31:54 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2012-08-15 21:36:31 -0700 |
| commit | 276bdb82dedb290511467a5a4fdbe9f0b52dce6f (patch) | |
| tree | 0882e07c971f4254c5fe07c0e3eefadb8c6cfda0 /net/unix/af_unix.c | |
| parent | 3592aaeb80290bda0f2cf0b5456c97bfc638b192 (diff) | |
dccp: check ccid before dereferencing
ccid_hc_rx_getsockopt() and ccid_hc_tx_getsockopt() might be called with
a NULL ccid pointer leading to a NULL pointer dereference. This could
lead to a privilege escalation if the attacker is able to map page 0 and
prepare it with a fake ccid_ops pointer.
Signed-off-by: Mathias Krause <[email protected]>
Cc: Gerrit Renker <[email protected]>
Cc: [email protected]
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions