sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
commit ef6c8d6ccf0c1dccdda092ebe8782777cd7803c9 upstream.
When SCTP handles an INIT chunk, it calls for example:
sctp_sf_do_5_1B_init
sctp_verify_init
sctp_verify_param
sctp_process_init
sctp_process_param
handling of SCTP_PARAM_SET_PRIMARY
sctp_verify_init() wasn't doing proper size validation and neither the
later handling, allowing it to work over the chunk itself, possibly being
uninitialized memory.
Change-Id: I024a989502d9cd33af3f34ef5fb89c5a8a3c7948
Signed-off-by:
Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by:
David S. Miller <davem@davemloft.net>
Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Git-commit: 71809401
Git-repo: https://android.googlesource.com/kernel/common
Signed-off-by:
PavanKumar S.R <quic_pavasr@quicinc.com>
Loading
Please register or sign in to comment