Commit e8daf27c authored Oct 09, 2017 by Eric Sesterhenn Committed by Pablo Neira Ayuso Oct 24, 2017

netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack



Add missing counter decrement to prevent out of bounds memory read.

Signed-off-by: Eric Sesterhenn <eric.sesterhenn@x41-dsec.de>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent ce49480d

net/netfilter/nf_conntrack_h323_asn1.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -877,6 +877,7 @@ int DecodeQ931(unsigned char buf, size_t sz, Q931 q931)
		if (sz < 1)
		break;
		len = *p++;
		sz--;
		if (sz < len)
		break;
		p += len;