]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
af_rose/x25: Sanity check the maximum user frame size
authorAlan Cox <alan@lxorguk.ukuu.org.uk>
Fri, 27 Mar 2009 07:28:21 +0000 (00:28 -0700)
committerChris Wright <chrisw@sous-sol.org>
Mon, 27 Apr 2009 17:36:57 +0000 (10:36 -0700)
commit33d06566b593703a972da232d08b6a12176f1854
tree3c049820daa136828ab440b99beef9471590755c
parent43a00bbcf5aeaac50d9e8271dbfa0d0fc1d4eb43
af_rose/x25: Sanity check the maximum user frame size

upstream commit: 83e0bbcbe2145f160fbaa109b0439dae7f4a38a9

CVE-2009-0795.

Otherwise we can wrap the sizes and end up sending garbage.

Closes #10423

Signed-off-by: Alan Cox <alan@lxorguk.ukuu.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
net/netrom/af_netrom.c
net/rose/af_rose.c
net/x25/af_x25.c