SCTP : Add paramters validity check for ASCONF chunk
authorWei Yongjun <yjwei@cn.fujitsu.com>
Wed, 19 Sep 2007 09:19:52 +0000 (17:19 +0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Wed, 26 Sep 2007 05:55:49 +0000 (22:55 -0700)
commit6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b
tree7ff3a0de1fc54e82bca9201d7f3d5df5c43c7cc7
parent3c77f961b55b6060858c68a213d7f4470d7f3eb2
SCTP : Add paramters validity check for ASCONF chunk

If ADDIP is enabled, when an ASCONF chunk is received with ASCONF
paramter length set to zero, this will cause infinite loop.
By the way, if an malformed ASCONF chunk is received, will cause
processing to access memory without verifying.

This is because of not check the validity of parameters in ASCONF chunk.
This patch fixed this.

Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
include/net/sctp/sm.h
include/net/sctp/structs.h
net/sctp/sm_make_chunk.c
net/sctp/sm_statefuns.c