Marek Lindner b47506d912 batman-adv: verify tt len does not exceed packet len ...

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>

2013-03-11 22:59:47 +01:00

..

bat_algo.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

bat_iv_ogm.c

batman-adv: verify tt len does not exceed packet len

2013-03-11 22:59:47 +01:00

bitarray.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

bitarray.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

bridge_loop_avoidance.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

bridge_loop_avoidance.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

debugfs.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

debugfs.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

distributed-arp-table.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

distributed-arp-table.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

gateway_client.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

gateway_client.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

gateway_common.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

gateway_common.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

hard-interface.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

hard-interface.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

hash.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

hash.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

icmp_socket.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

icmp_socket.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

Kconfig

batman-adv: Add function to calculate crc32c for the skb payload

2012-11-21 12:35:41 +01:00

main.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

main.h

batman-adv: Start new development cycle

2013-01-19 21:18:13 +08:00

Makefile

batman-adv: Distributed ARP Table - add compile option

2012-11-07 20:00:22 +01:00

originator.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

originator.h

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

packet.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

ring_buffer.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

ring_buffer.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

routing.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

routing.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

send.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

send.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

soft-interface.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

soft-interface.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

sysfs.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

sysfs.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

translation-table.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

translation-table.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

types.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

unicast.c

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

unicast.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00

vis.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

vis.h

batman-adv: update copyright years

2013-01-19 21:18:12 +08:00