浏览代码

netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack

Add missing counter decrement to prevent out of bounds memory read.

Signed-off-by: Eric Sesterhenn <eric.sesterhenn@x41-dsec.de>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Eric Sesterhenn 8 年之前
父节点
当前提交
e8daf27c2f
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      net/netfilter/nf_conntrack_h323_asn1.c

+ 1 - 0
net/netfilter/nf_conntrack_h323_asn1.c

@@ -877,6 +877,7 @@ int DecodeQ931(unsigned char *buf, size_t sz, Q931 *q931)
 		if (sz < 1)
 			break;
 		len = *p++;
+		sz--;
 		if (sz < len)
 			break;
 		p += len;