Re: patch: pppd: fix crash in LCP reject codepath

2015-06-12 Thread Mike Belopuhov
On 12 June 2015 at 15:18, Sergey Ryazanov wrote: > Friday, June 12, 2015, 4:09:09 PM, you wrote: >> pppd(8) creates Reject message by moving with memcpy(3) rejected >> option to left in buffer. If moving distance is less then option >> length than it falls in coping between overlappin

Re: patch: pppd: fix crash in LCP reject codepath

2015-06-12 Thread Sergey Ryazanov
Friday, June 12, 2015, 4:09:09 PM, you wrote: > pppd(8) creates Reject message by moving with memcpy(3) rejected > option to left in buffer. If moving distance is less then option > length than it falls in coping between overlapping regions case. What > leads to crash. > The followin

patch: pppd: fix crash in LCP reject codepath

2015-06-12 Thread Sergey Ryazanov
pppd(8) creates Reject message by moving with memcpy(3) rejected option to left in buffer. If moving distance is less then option length than it falls in coping between overlapping regions case. What leads to crash. The following patch fixes this issue by replacing memcpy(3) b