[NETFILTER]: Fix crash in ip_nat_pptp
authorPatrick McHardy <kaber@trash.net>
Tue, 10 Jan 2006 00:43:43 +0000 (16:43 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Tue, 10 Jan 2006 20:54:30 +0000 (12:54 -0800)
commit15db34702cfafd24acc60295cf14861e497502ab
tree541d18bb0b8e1d915ca258d16ea79df730b8f0b7
parentbb94aa169eaa6e713a429370d37388722f08666f
[NETFILTER]: Fix crash in ip_nat_pptp

When an inbound PPTP_IN_CALL_REQUEST packet is received the
PPTP NAT helper uses a NULL pointer in pointer arithmentic to
calculate the offset in the packet which needs to be mangled
and corrupts random memory or crashes.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/netfilter/ip_nat_helper_pptp.c