[NETFILTER]: H.323 helper: fix sequence extension parsing When parsing unknown sequence extensions the "son"-pointer points behind the last known extension for this type, don't try to interpret it. Signed-off-by: Patrick McHardy --- commit b3199d41dfddb7521bcc09ab0fc9925b5702c954 tree 7da1d63f6fa658506616cba8621dd1c348ef0c31 parent 27ce42efc29f421d4238c426769f057dd384bd14 author Patrick McHardy Mon, 22 May 2006 12:40:03 +0200 committer Patrick McHardy Mon, 22 May 2006 12:40:03 +0200 net/ipv4/netfilter/ip_conntrack_helper_h323_asn1.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/net/ipv4/netfilter/ip_conntrack_helper_h323_asn1.c b/net/ipv4/netfilter/ip_conntrack_helper_h323_asn1.c index 5f4d114..11862f1 100644 --- a/net/ipv4/netfilter/ip_conntrack_helper_h323_asn1.c +++ b/net/ipv4/netfilter/ip_conntrack_helper_h323_asn1.c @@ -555,7 +555,7 @@ int decode_seq(bitstr_t * bs, field_t * /* Decode the extension components */ for (opt = 0; opt < bmp2_len; opt++, i++, son++) { - if (son->attr & STOP) { + if (i < f->ub && son->attr & STOP) { PRINT("%*.s%s\n", (level + 1) * TAB_SIZE, " ", son->name); return H323_ERROR_STOP;