]> git.ipfire.org Git - thirdparty/iptables.git/commit
libxt_sctp: fix array out of range in print_chunk
authorhuaibin Wang <huaibin.wang@6wind.com>
Mon, 13 Nov 2017 13:27:54 +0000 (14:27 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 13 Nov 2017 13:30:08 +0000 (14:30 +0100)
commit71de414c21f7f31270e5d62e782e52257e5c3d06
treee5fc243b299675b0a89e9d5e1b578b74aaae133d
parent1a32381aa637d6a4a60f793ed671e9c095ef77c2
libxt_sctp: fix array out of range in print_chunk

For chunk type ASCONF, ASCONF_ACK and FORWARD_TSN, sctp_chunk_names[].chunk_type
is not equal to the corresponding index in sctp_chunk_names[]. Using this field
leads to a segmentation fault (index out of range).

Example
$ iptables -A INPUT -p sctp --chunk-type all ASCONF,ASCONF_ACK,FORWARD_TSN -j ACCEPT
$ iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
Segmentation fault

Signed-off-by: huaibin Wang <huaibin.wang@6wind.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
extensions/libxt_sctp.c
extensions/libxt_sctp.t