tree 3afe286f19bd8af561ab6131914fb0df8c5ab862
parent 2cd052e44329dd2b42eb958f8f346b053de6e2cd
author Jing Min Zhao <zhaojingmin@vivecode.com> 1183680301 -0700
committer David S. Miller <davem@sunset.davemloft.net> 1183682423 -0700

[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values

Choices' index values may be out of range while still encoded in the fixed
length bit-field. This bug may cause access to undefined types (NULL
pointers) and thus crashes (Reported by Zhongling Wen).

This patch also adds checking of decode flag when decoding SEQUENCEs.

Signed-off-by: Jing Min Zhao <zhaojingmin@vivecode.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>