[PATCH 13/23] netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack

[Pablo Neira Ayuso]

From: Eric Sesterhenn <eric.sesterh...@x41-dsec.de>

Add missing counter decrement to prevent out of bounds memory read.

Signed-off-by: Eric Sesterhenn <eric.sesterh...@x41-dsec.de>
Acked-by: Florian Westphal <f...@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pa...@netfilter.org>
---
 net/netfilter/nf_conntrack_h323_asn1.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/net/netfilter/nf_conntrack_h323_asn1.c 
b/net/netfilter/nf_conntrack_h323_asn1.c
index 7831aa1effc9..cf1bf2605c10 100644
--- a/net/netfilter/nf_conntrack_h323_asn1.c
+++ b/net/netfilter/nf_conntrack_h323_asn1.c
@@ -877,6 +877,7 @@ int DecodeQ931(unsigned char *buf, size_t sz, Q931 *q931)
                if (sz < 1)
                        break;
                len = *p++;
+               sz--;
                if (sz < len)
                        break;
                p += len;
-- 
2.11.0