]> git.karo-electronics.de Git - karo-tx-linux.git/commit
Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)
authorMarcel Holtmann <marcel@holtmann.org>
Thu, 4 Jan 2007 21:57:52 +0000 (22:57 +0100)
committerAdrian Bunk <bunk@stusta.de>
Tue, 9 Jan 2007 02:23:30 +0000 (03:23 +0100)
commit044a3e96c42df125bbc046495d49a6b8f380aa5a
treed492388f69a501d41b50c7fc92c14b0efa85158f
parentd9be428145481c9c23e02e25a49205fc9def5d36
Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)

With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
net/bluetooth/cmtp/capi.c