]> git.ipfire.org Git - people/ms/linux.git/commit
projects / people / ms / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 601c7cf) | patch
[ATM] CLIP: Do not refer freed skbuff in clip_mkip() (CVE-2006-4997)
authorYOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Fri, 13 Oct 2006 23:13:36 +0000 (01:13 +0200)
committerAdrian Bunk <bunk@stusta.de>
Fri, 13 Oct 2006 23:13:36 +0000 (01:13 +0200)
commitcffa5ffe7214563e25b1cd72b229b4e6a709eb71
tree05dc3963c154698ead9364445d7ba892be8f1082tree
parent601c7cf7254ea9544d74381b8ee022b7fb207535commit | diff
[ATM] CLIP: Do not refer freed skbuff in clip_mkip() (CVE-2006-4997)

In clip_mkip(), skb->dev is dereferenced after clip_push(),
which frees up skb.

Advisory: AD_LAB-06009 (<adlab@venustech.com.cn>).

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
net/atm/clip.c diff | blob | blame | history
Michael's Linux tree.