projects / unionfs-2.6.39.y.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9880429) | patch
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)
authorPatrick McHardy <kaber@trash.net>
Tue, 10 Jan 2006 01:00:07 +0000 (02:00 +0100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 31 Jan 2006 06:42:30 +0000 (22:42 -0800)
commit703b69791369263e1d15f88f3e6aed02c1514fc2
treef1e3a701b292f562e733e29127104dcf0b0db0b9tree | snapshot
parent988042953360dcc04a965965f08e11b7e8329328commit | diff
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/ipv4/netfilter/ip_nat_helper_pptp.c diff | blob | history
unionfs2-2.6.39.y