]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)
authorPatrick McHardy <kaber@trash.net>
Tue, 10 Jan 2006 01:00:07 +0000 (02:00 +0100)
committerChris Wright <chrisw@sous-sol.org>
Sun, 15 Jan 2006 06:15:29 +0000 (22:15 -0800)
commit1cc7060e107b1dbb4a537cb20af949ffadb01222
treec70ef37ca73cad094218c3cd860cd5b356f0c995
parenta81954faaf6fdbf1fd8a1ef03f2d75e01f56a974
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
net/ipv4/netfilter/ip_nat_helper_pptp.c