[PATCH] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106) (d4ea7f9f) · Commits · Joan Touzet / Linux

Commit d4ea7f9f authored 18 years ago by

Marcel Holtmann Committed by Chris Wright 18 years ago

[PATCH] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)


With malformed packets it might be possible to overwrite internal
CMTP and CAPI data structures. This patch adds additional length
checks to prevent these kinds of remote attacks.

Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>

parent f7323792

Hide whitespace changes

Inline Side-by-side

Showing with 33 additions and 6 deletions

Please register or to comment

Admin message

[PATCH] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)