Merge rev 1.96 of NetBSD's net/if_spppsubr.c:
authorJoerg Sonnenberger <joerg@dragonflybsd.org>
Wed, 23 Aug 2006 20:43:17 +0000 (20:43 +0000)
committerJoerg Sonnenberger <joerg@dragonflybsd.org>
Wed, 23 Aug 2006 20:43:17 +0000 (20:43 +0000)
commit4a4748deb947208d3d9b4cc4b770657d3e05ffd7
tree4749d8464aeb8b9273c8bed9b6dc3da517d48f1c
parent12340c26fb359abfc96877b6890f9e421d1bb046
Merge rev 1.96 of NetBSD's net/if_spppsubr.c:
  A problem has been identified in the in-kernel PPP code shared by ISDN PPP
  interfaces ippp(4) and pppoe(4). Insufficient checking of options presented
  by the peer may cause writing of copies of the malicious input beyond the
  end of a buffer allocated for that purpose.

  Issue found by pavel@
  Fix from martin@

  This is SA2006-019 (CVE-2006-4304)
sys/net/sppp/if_spppsubr.c