commit e17df688f7064dae1417ce425dd1e4b71d24d63b
author Patrick McHardy <kaber@trash.net> Tue May 02 23:23:07 2006 +0200
committer Linus Torvalds <torvalds@g5.osdl.org> Tue May 02 17:26:39 2006 -0700
tree bc631aa05f4fde009ff260fca51005eb9077a203
parent ebf34c9b6fcd22338ef764b039b3ac55ed0e297b

[NETFILTER] SCTP conntrack: fix infinite loop

fix infinite loop in the SCTP-netfilter code: check SCTP chunk size to
guarantee progress of for_each_sctp_chunk(). (all other uses of
for_each_sctp_chunk() are preceded by do_basic_checks(), so this fix
should be complete.)

Based on patch from Ingo Molnar <mingo@elte.hu>

CVE-2006-1527

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>