]> git.ipfire.org Git - people/ms/linux.git/commit
projects / people / ms / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a81954f) | patch
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)
authorPatrick McHardy <kaber@trash.net>
Tue, 10 Jan 2006 01:00:07 +0000 (02:00 +0100)
committerChris Wright <chrisw@sous-sol.org>
Sun, 15 Jan 2006 06:15:29 +0000 (22:15 -0800)
commit1cc7060e107b1dbb4a537cb20af949ffadb01222
treec70ef37ca73cad094218c3cd860cd5b356f0c995tree | snapshot
parenta81954faaf6fdbf1fd8a1ef03f2d75e01f56a974commit | diff
[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
net/ipv4/netfilter/ip_nat_helper_pptp.c diff | blob | blame | history
Michael's Linux tree.