tree c23e5fb025c23fc7a19a0c5fdf4fdcd411596a9f
parent 7c6baa304b841673d3a55ea4fcf9a5cbf7a1674b
author Marek Lindner <lindner_marek@yahoo.de> 1362364789 +0800
committer Antonio Quartulli <ordex@autistici.org> 1363039187 +0100

batman-adv: verify tt len does not exceed packet len

batadv_iv_ogm_process() accesses the packet using the tt_num_changes
attribute regardless of the real packet len (assuming the length check
was done before). Therefore a length check is needed to avoid reading
random memory.

Signed-off-by: Marek Lindner <lindner_marek@yahoo.de>
Signed-off-by: Antonio Quartulli <ordex@autistici.org>