tree f1e3a701b292f562e733e29127104dcf0b0db0b9
parent 988042953360dcc04a965965f08e11b7e8329328
author Patrick McHardy <kaber@trash.net> 1136854807 +0100
committer Greg Kroah-Hartman <gregkh@suse.de> 1138689750 -0800

[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>