diff options
| author | Wei Yongjun <yjwei@cn.fujitsu.com> | 2007-09-19 17:19:52 +0800 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2007-09-25 22:55:49 -0700 |
| commit | 6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b (patch) | |
| tree | 7ff3a0de1fc54e82bca9201d7f3d5df5c43c7cc7 /include/net/sctp/structs.h | |
| parent | 3c77f961b55b6060858c68a213d7f4470d7f3eb2 (diff) | |
| download | linux-stable-6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b.tar.gz linux-stable-6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b.tar.bz2 linux-stable-6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b.zip | |
SCTP : Add paramters validity check for ASCONF chunk
If ADDIP is enabled, when an ASCONF chunk is received with ASCONF
paramter length set to zero, this will cause infinite loop.
By the way, if an malformed ASCONF chunk is received, will cause
processing to access memory without verifying.
This is because of not check the validity of parameters in ASCONF chunk.
This patch fixed this.
Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Diffstat (limited to 'include/net/sctp/structs.h')
| -rw-r--r-- | include/net/sctp/structs.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/sctp/structs.h b/include/net/sctp/structs.h index c2fe2dcc9afc..490a2928817c 100644 --- a/include/net/sctp/structs.h +++ b/include/net/sctp/structs.h @@ -421,6 +421,7 @@ struct sctp_signed_cookie { * internally. */ union sctp_addr_param { + struct sctp_paramhdr p; struct sctp_ipv4addr_param v4; struct sctp_ipv6addr_param v6; }; |