]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
MFC r334532:
authortuexen <tuexen@FreeBSD.org>
Wed, 6 Jun 2018 20:03:35 +0000 (20:03 +0000)
committertuexen <tuexen@FreeBSD.org>
Wed, 6 Jun 2018 20:03:35 +0000 (20:03 +0000)
commit6659055b919e454ffb41ec4c0bf87f6f8b742141
tree7c7fd787d6706c7df7ca5d637a5cfec36c99f115
parent062a969b041ab2fab3855337a662bc8fec8823e0
MFC r334532:

Don't overflow a buffer if we receive an INIT or INIT-ACK chunk
without a RANDOM parameter but with a CHUNKS or HMAC-ALGO parameter.
Please note that sending this combination violates the specification.

Thanks to Ronald E. Crane for reporting the issue for the userland
stack.
sys/netinet/sctp_auth.c
sys/netinet/sctp_pcb.c