blob: 50367000cb1d987f1501077d24e4bd0188e62a73 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
From b2dda4bbaa44ea296f1d75acc64cace221935d0d Mon Sep 17 00:00:00 2001
From: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Date: Wed, 6 Oct 2010 20:38:42 +0900
Subject: [PATCH] ping: Fix resource consumption triggered by specially crafted ICMP Echo Reply (CVE-2010-2529)
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
---
ping.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/ping.c b/ping.c
index 4472d77..eacb29d 100644
--- a/ping.c
+++ b/ping.c
@@ -1032,7 +1032,7 @@ void pr_options(unsigned char * cp, int hlen)
i = j;
i -= IPOPT_MINOFF;
if (i <= 0)
- continue;
+ break;
if (i == old_rrlen
&& !strncmp((char *)cp, old_rr, i)
&& !(options & F_FLOOD)) {
@@ -1069,7 +1069,7 @@ void pr_options(unsigned char * cp, int hlen)
i = j;
i -= 5;
if (i <= 0)
- continue;
+ break;
flags = *++cp;
printf("\nTS: ");
cp++;
--
1.7.2.3
|