diff options
| author | Denys Fedoryshchenko <denys.f@collabora.com> | 2026-07-06 11:28:53 +0300 |
|---|---|---|
| committer | Denys Fedoryshchenko <denys.f@collabora.com> | 2026-07-06 11:28:53 +0300 |
| commit | 2ba4437b88dc54ebc5dea6ba1c2007b9cd4aa0e0 (patch) | |
| tree | 232a8f10c98ffe9adb52bda71ff602a03e3451fb /accel-pppd/cli/std_cmd.c | |
| parent | 5787a45a952c021f697b31abe0063013912d7c8b (diff) | |
| download | accel-ppp-2ba4437b88dc54ebc5dea6ba1c2007b9cd4aa0e0.tar.gz accel-ppp-2ba4437b88dc54ebc5dea6ba1c2007b9cd4aa0e0.zip | |
pppoe: fix use-after-free in mac_filter_load()
When a mac-filter file line contained an octet > 255, the error path freed
the entry but kept writing to it and linked it into mac_list. Validate all
octets before allocating so invalid lines are skipped entirely.
This is not considered a security vulnerability: the mac-filter file can
only be configured by an administrator with access to the daemon config,
or the CLI, both of which require privileged access.
Fixes #307
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
Diffstat (limited to 'accel-pppd/cli/std_cmd.c')
0 files changed, 0 insertions, 0 deletions