]> The Tcpdump Group git mirrors - tcpdump/commit
projects / tcpdump / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 756d0a1) | patch
SMB: prevent stack exhaustion
authorDenis Ovsienko <[email protected]>
Fri, 7 Sep 2018 20:10:36 +0000 (21:10 +0100)
committerFrancois-Xavier Le Bail <[email protected]>
Tue, 29 Oct 2019 08:29:19 +0000 (09:29 +0100)
commit42857bd6a9ce8838e0c7765677cf2aa99937f612
tree6fdef140d54c20a225afc0d0518e767732c632e2tree
parent756d0a1356a49efbd1a9f461f478913cb8163b23commit | diff
SMB: prevent stack exhaustion

Enforce a limit on how many times smb_fdata() can recurse.

This change fixes CVE-2018-16452.

This fixes a stack exhaustion discovered by Include Security working
under the Mozilla SOS program in 2018 by means of code audit.

Cherry picked from 24182d959f661327525a20d9a94c98a8ec016778
in 4.9 branch.
smbutil.c diff | blob | history
[mirror] the TCPdump network dissector