)]}'
{
  "commit": "ffca46766850d4b96a26ad511a7997f74da2df8c",
  "tree": "bb2ad3e16dae763afbfc21b82a3ab47c736ea6a5",
  "parents": [
    "473cea4983b582fedb10f84b43e8924716ebc4fc"
  ],
  "author": {
    "name": "Marcelo Ricardo Leitner",
    "email": "marcelo.leitner@gmail.com",
    "time": "Mon Jun 28 16:13:43 2021 -0300"
  },
  "committer": {
    "name": "Greg Kroah-Hartman",
    "email": "gregkh@linuxfoundation.org",
    "time": "Sun Sep 26 14:08:56 2021 +0200"
  },
  "message": "sctp: validate chunk size in __rcv_asconf_lookup\n\ncommit b6ffe7671b24689c09faa5675dd58f93758a97ae upstream.\n\nIn one of the fallbacks that SCTP has for identifying an association for an\nincoming packet, it looks for AddIp chunk (from ASCONF) and take a peek.\nThing is, at this stage nothing was validating that the chunk actually had\nenough content for that, allowing the peek to happen over uninitialized\nmemory.\n\nSimilar check already exists in actual asconf handling in\nsctp_verify_asconf().\n\nSigned-off-by: Marcelo Ricardo Leitner \u003cmarcelo.leitner@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ddb5b5c2550ef74520026f80b68a4b4fb9c59431",
      "old_mode": 33188,
      "old_path": "net/sctp/input.c",
      "new_id": "49c49a4d203f0b68f55eb2864c15b70abbf661b3",
      "new_mode": 33188,
      "new_path": "net/sctp/input.c"
    }
  ]
}