nf_conntrack_h323: add checking of out-of-range on choices' index values
Jing Min Zhao authored
[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values

Choices' index values may be out of range while still encoded in the fixed
length bit-field. This bug may cause access to undefined types (NULL
pointers) and thus crashes (Reported by Zhongling Wen).

This patch also adds checking of decode flag when decoding SEQUENCEs.
Signed-off-by: default avatarJing Min Zhao <zhaojingmin@vivecode.com>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
fcc56368
Name Last commit Last update
..
802 [PATCH] remove many unneeded #includes of sched.h
8021q [VLAN]: Allow VLAN interface on top of bridge interface
appletalk [APPLETALK]: Fix a remotely triggerable crash
atm [NET]: Fix neighbour destructor handling.
ax25 [NET] AX.25 Kconfig and docs updates and fixes
bluetooth [PATCH] BLUETOOTH: Fix locking in hci_sock_dev_event().
bridge [BRIDGE]: Unaligned access when comparing ethernet addresses
core [PATCH] NET: "wrong timeout value" in sk_wait_data() v2
dccp [DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV
decnet [DECNet] fib: Fix out of bound access of dn_fib_props[]
econet [PATCH] remove many unneeded #includes of sched.h
ethernet [PATCH] remove many unneeded #includes of sched.h
ieee80211 [PATCH] fix typos in net/ieee80211/Kconfig
ipv4 [PATCH] TCP: Use default 32768-61000 outgoing port range in all cases.
ipv6 [PATCH] IPV6 ROUTE: No longer handle ::/0 specially.
ipx [IPX]: Remove ancient changelog
irda [IrDA]: Correctly handling socket error
iucv [S390]: Add AF_IUCV socket support
key [IPSEC] af_key: Fix thinko in pfkey_xfrm_policy2msg()
lapb [PATCH] remove many unneeded #includes of sched.h
llc [PATCH] sysctl: remove insert_at_head from register_sysctl
netfilter nf_conntrack_h323: add checking of out-of-range on choices' index values
netlabel [NET]: Fix kfree(skb)
netlink [NETLINK]: Don't attach callback to a going-away netlink socket
netrom [PATCH] sysctl: remove insert_at_head from register_sysctl
packet
rose
rxrpc
sched
sctp
sunrpc
tipc
unix
wanrouter
x25
xfrm
Kconfig
Makefile
TUNABLE
compat.c
nonet.c
socket.c
sysctl_net.c