rose: Add length checks to CALL_REQUEST parsing
authorBen Hutchings <ben@decadent.org.uk>
Sun, 20 Mar 2011 06:48:05 +0000 (06:48 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Mar 2011 00:59:04 +0000 (17:59 -0700)
commite0bccd315db0c2f919e7fcf9cb60db21d9986f52
tree8cf512f43221087f964c0f55c7665e293e96921b
parentbe20250c13f88375345ad99950190685eda51eb8
rose: Add length checks to CALL_REQUEST parsing

Define some constant offsets for CALL_REQUEST based on the description
at <http://www.techfest.com/networking/wan/x25plp.htm> and the
definition of ROSE as using 10-digit (5-byte) addresses.  Use them
consistently.  Validate all implicit and explicit facilities lengths.
Validate the address length byte rather than either trusting or
assuming its value.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/rose.h
net/rose/af_rose.c
net/rose/rose_loopback.c
net/rose/rose_route.c
net/rose/rose_subr.c