]> git.karo-electronics.de Git - karo-tx-linux.git/commit
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()
authorPatrick McHardy <kaber@trash.net>
Thu, 7 Jan 2010 17:33:18 +0000 (18:33 +0100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 18 Jan 2010 18:19:41 +0000 (10:19 -0800)
commit545b02070bb58430c8ce96369bdbbe15e4aef1f7
tree3b80a708e2c3f6ce0e504a166a13555d818c2b60
parent635b4f931d32118a7bda1b6b7622883bc7e0dcab
netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()

commit aaff23a95aea5f000895f50d90e91f1e2f727002 upstream.

As noticed by Dan Carpenter <error27@gmail.com>, update_nl_seq()
currently contains an out of bounds read of the seq_aft_nl array
when looking for the oldest sequence number position.

Fix it to only compare valid positions.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/netfilter/nf_conntrack_ftp.c