[PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931

2016-07-23 Thread Pablo Neira Ayuso
From: Toby DiPasquale This patch corrects an off-by-one error in the DecodeQ931 function in the nf_conntrack_h323 module. This error could result in reading off the end of a Q.931 frame. Signed-off-by: Toby DiPasquale Signed-off-by: Pablo Neira Ayuso --- net/netfilter/nf_conntrack_h323_asn1.c

[PATCH 12/25] netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931

2016-07-23 Thread Pablo Neira Ayuso
From: Toby DiPasquale This patch corrects an off-by-one error in the DecodeQ931 function in the nf_conntrack_h323 module. This error could result in reading off the end of a Q.931 frame. Signed-off-by: Toby DiPasquale Signed-off-by: Pablo Neira Ayuso --- net/netfilter/nf_conntrack_h323_asn1.c

Re: [PATCH] fix off-by-one in DecodeQ931

2016-07-11 Thread Pablo Neira Ayuso
On Wed, Jul 13, 2016 at 02:59:00PM -0400, Toby DiPasquale wrote: > fix off-by-one in DecodeQ931 > > This patch corrects an off-by-one error in the DecodeQ931 function in > the nf_conntrack_h323 module. This error could result in reading off > the end of a Q.931 frame. Applied to

[PATCH] fix off-by-one in DecodeQ931

2016-07-09 Thread Toby DiPasquale
fix off-by-one in DecodeQ931 This patch corrects an off-by-one error in the DecodeQ931 function in the nf_conntrack_h323 module. This error could result in reading off the end of a Q.931 frame. Signed-off-by: Toby DiPasquale --- net/netfilter/nf_conntrack_h323_asn1.c | 3 ++- 1 file changed

Re: [PATCH] fix off-by-one in DecodeQ931

2016-07-05 Thread Pablo Neira Ayuso
Hi Tobias, On Wed, Jul 13, 2016 at 02:59:00PM -0400, Toby DiPasquale wrote: > --- > net/netfilter/nf_conntrack_h323_asn1.c | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) Please add a description to your patch and include your Signed-off-by. For more info, have a look at: http://lxr.

[PATCH] fix off-by-one in DecodeQ931

2016-07-03 Thread Toby DiPasquale
--- net/netfilter/nf_conntrack_h323_asn1.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/netfilter/nf_conntrack_h323_asn1.c b/net/netfilter/nf_conntrack_h323_asn1.c index bcd5ed6..89b2e46 100644 --- a/net/netfilter/nf_conntrack_h323_asn1.c +++ b/net/netfilter/nf_conntr

Re: off-by-one in DecodeQ931

2016-06-12 Thread Toby DiPasquale
27;t know why it wasn't applied yet. >> >> Pablo? > > This doesn't apply. > > $ git am /tmp/off-by-one-in-DecodeQ931.patch -s > Applying: off-by-one in DecodeQ931 > error: patch failed: net/netfilter/nf_conntrack_h323_asn1.c:846 > error: net/netfilter/nf_co

Re: off-by-one in DecodeQ931

2016-06-06 Thread Pablo Neira Ayuso
On Mon, Jun 06, 2016 at 04:35:55PM +0200, Florian Westphal wrote: > Toby DiPasquale wrote: > > Is this latest patch OK? > > Yes, I don't know why it wasn't applied yet. > > Pablo? This doesn't apply. $ git am /tmp/off-by-one-in-DecodeQ931.patch -s Appl

Re: off-by-one in DecodeQ931

2016-06-06 Thread Florian Westphal
Toby DiPasquale wrote: > Is this latest patch OK? Yes, I don't know why it wasn't applied yet. Pablo? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.

Re: off-by-one in DecodeQ931

2016-06-06 Thread Toby DiPasquale
Is this latest patch OK? On Tue, May 3, 2016 at 1:12 AM, Toby DiPasquale wrote: > On Mon, Apr 25, 2016 at 11:29 AM, Florian Westphal wrote: >> -> sz (size_t) will underflow here >> >> I'd suggest to change the if (sz < 1) to if (sz < 2) to >> resolve this, the while loop below has to be taken an

Re: off-by-one in DecodeQ931

2016-05-20 Thread Toby DiPasquale
I'm a bit new to this; is this patch OK? On Tue, May 3, 2016 at 1:12 AM, Toby DiPasquale wrote: > On Mon, Apr 25, 2016 at 11:29 AM, Florian Westphal wrote: >> -> sz (size_t) will underflow here >> >> I'd suggest to change the if (sz < 1) to if (sz < 2) to >> resolve this, the while loop below ha

Re: off-by-one in DecodeQ931

2016-05-02 Thread Toby DiPasquale
On Mon, Apr 25, 2016 at 11:29 AM, Florian Westphal wrote: > -> sz (size_t) will underflow here > > I'd suggest to change the if (sz < 1) to if (sz < 2) to > resolve this, the while loop below has to be taken anyway. Thanks, Florian! Updated patch below: Signed-off-by: Toby DiPasquale diff --gi

Re: off-by-one in DecodeQ931

2016-04-25 Thread Florian Westphal
Toby DiPasquale wrote: > I was reviewing the H.323 conntrack helper in the kernel when I came > across what appears to be an off-by-one error in the DecodeQ931 > function. The MessageType field of the Q931 record is assigned and p > is incremented, but the corresponding decrement to sz is missing,

[PATCH] off-by-one in DecodeQ931

2016-04-23 Thread Toby DiPasquale
I was reviewing the H.323 conntrack helper in the kernel when I came across what appears to be an off-by-one error in the DecodeQ931 function. The MessageType field of the Q931 record is assigned and p is incremented, but the corresponding decrement to sz is missing, leading the sz variable to be o