]> err.no Git - linux-2.6/commit
[Bluetooth] Add packet size checks for CAPI messages
authorMarcel Holtmann <marcel@holtmann.org>
Mon, 8 Jan 2007 01:16:23 +0000 (02:16 +0100)
committerDavid S. Miller <davem@sunset.davemloft.net>
Tue, 9 Jan 2007 08:29:53 +0000 (00:29 -0800)
commitf4777569204cb59f2f04fbe9ef4e9a6918209104
treec42ce096df9584d4c83b7003c7bbbd8c30be970d
parentd2e7543c41755f4ec75385536b109d5f084fe734
[Bluetooth] Add packet size checks for CAPI messages

With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/cmtp/capi.c