CVS commit: src/sys/net

[Adrian Portelli <adrianp%netbsd.org@localhost>]

Module Name:    src
Committed By:   adrianp
Date:           Wed Aug 23 20:02:23 UTC 2006

Modified Files:
        src/sys/net: if_spppsubr.c

Log Message:
A problem has been identified in the in-kernel PPP code shared by ISDN PPP
interfaces ippp(4) and pppoe(4). Insufficient checking of options presented
by the peer may cause writing of copies of the malicious input beyond the
end of a buffer allocated for that purpose.

Issue found by pavel@
Fix from martin@

This is SA2006-019 (CVE-2006-4304)


To generate a diff of this commit:
cvs rdiff -r1.95 -r1.96 src/sys/net/if_spppsubr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.