1
linux/net/ieee802154
Tony Cheneau d4787a1543 6lowpan: Fix null pointer dereference in UDP uncompression function
When a UDP packet gets fragmented, a crash will occur at reassembly time.
This is because skb->transport_header is not set during earlier period of fragment reassembly.
As a consequence, call to udp_hdr() return NULL and uh (which is NULL) gets
dereferenced without much test.

Signed-off-by: Tony Cheneau <tony.cheneau@amnesiak.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-07-16 22:51:15 -07:00
..
6lowpan.c 6lowpan: Fix null pointer dereference in UDP uncompression function 2012-07-16 22:51:15 -07:00
6lowpan.h 6lowpan: duplicate definition of IEEE802154_ALEN 2012-04-26 06:01:09 -04:00
af802154.h
af_ieee802154.c ieee802154: free skb buffer if dev isn't running 2011-06-30 16:18:09 +04:00
dgram.c ieee802154: verify packet size before trying to allocate it 2012-07-08 23:49:30 -07:00
ieee802154.h
Kconfig IEEE802.15.4: 6LoWPAN basic support 2011-08-24 19:36:06 -07:00
Makefile IEEE802.15.4: 6LoWPAN basic support 2011-08-24 19:36:06 -07:00
netlink.c net: Use NLMSG_DEFAULT_SIZE in combination with nlmsg_new() 2012-06-28 17:56:43 -07:00
nl_policy.c
nl-mac.c net: Use NLMSG_DEFAULT_SIZE in combination with nlmsg_new() 2012-06-28 17:56:43 -07:00
nl-phy.c net: Use NLMSG_DEFAULT_SIZE in combination with nlmsg_new() 2012-06-28 17:56:43 -07:00
raw.c net: cleanup unsigned to unsigned int 2012-04-15 12:44:40 -04:00
wpan-class.c