xt_psd: avoid crash due to curr->next corruption

curr->ports[] is of size SCAN_MAX_COUNT - 1, so under certain
conditions we wrote past end of array, corrupting ->next pointer
of the adjacent host entry.

Reported-and-tested-by: Serge Leschinsky <serge.leschinsky@gmail.com>
This commit is contained in:
Florian Westphal
2012-04-18 14:13:28 +02:00
committed by Jan Engelhardt
parent 72b1421783
commit 759546f8d0
2 changed files with 3 additions and 1 deletions

View File

@@ -1,6 +1,8 @@
HEAD
====
Fixes:
- xt_psd: avoid crash due to curr->next corruption
v1.42 (2012-04-05)