From: Vlad Yasevich <vladislav.yasevich@xxxxxx> Date: Thu, 25 Sep 2008 17:14:20 -0400 > From: Wei Yongjun <yjwei@xxxxxxxxxxxxxx> > > Since call to function sctp_sf_abort_violation() need paramter 'arg' with > 'struct sctp_chunk' type, it will read the chunk type and chunk length from > the chunk_hdr member of chunk. But call to sctp_sf_violation_paramlen() > always with 'struct sctp_paramhdr' type's parameter, it will be passed to > sctp_sf_abort_violation(). This may cause kernel panic. > > sctp_sf_violation_paramlen() > |-- sctp_sf_abort_violation() > |-- sctp_make_abort_violation() > > This patch fixed this problem. This patch also fix two place which called > sctp_sf_violation_paramlen() with wrong paramter type. > > Signed-off-by: Wei Yongjun <yjwei@xxxxxxxxxxxxxx> > Signed-off-by: Vlad Yasevich <vladislav.yasevich@xxxxxx> Applied to net-2.6, thanks. -- To unsubscribe from this list: send the line "unsubscribe linux-sctp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
