diff options
| author |   Ben Hutchings <ben@decadent.org.uk> | 2011-03-20 06:48:05 +0000 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2011-03-27 17:59:04 -0700 |
| commit | e0bccd315db0c2f919e7fcf9cb60db21d9986f52 (patch) | |
| tree | 8cf512f43221087f964c0f55c7665e293e96921b /net/core/dev.c | |
| parent | ROSE: prevent heap corruption with bad facilities (diff) | |
| download | linux-dev-e0bccd315db0c2f919e7fcf9cb60db21d9986f52.tar.xz linux-dev-e0bccd315db0c2f919e7fcf9cb60db21d9986f52.zip | |
rose: Add length checks to CALL_REQUEST parsing
Define some constant offsets for CALL_REQUEST based on the description
at <http://www.techfest.com/networking/wan/x25plp.htm> and the
definition of ROSE as using 10-digit (5-byte) addresses. Use them
consistently. Validate all implicit and explicit facilities lengths.
Validate the address length byte rather than either trusting or
assuming its value.
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/core/dev.c')
0 files changed, 0 insertions, 0 deletions