From 5592371f479db1f77e5e0169774c0a288f5778d9 Mon Sep 17 00:00:00 2001
From: Jing Min Zhao <zhaojingmin@vivecode.com>
Date: Thu, 5 Jul 2007 17:05:01 -0700
Subject: [PATCH] --- yaml --- r: 58242 b: refs/heads/master c:
 25845b5155b55cd77e42655ec24161ba3feffa47 h: refs/heads/master v: v3

---
 [refs]                                       | 2 +-
 trunk/net/netfilter/nf_conntrack_h323_asn1.c | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/[refs] b/[refs]
index 5511a85ee38b..a978817546d4 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 2cd052e44329dd2b42eb958f8f346b053de6e2cd
+refs/heads/master: 25845b5155b55cd77e42655ec24161ba3feffa47
diff --git a/trunk/net/netfilter/nf_conntrack_h323_asn1.c b/trunk/net/netfilter/nf_conntrack_h323_asn1.c
index f6fad713d484..6b7eaa019d4c 100644
--- a/trunk/net/netfilter/nf_conntrack_h323_asn1.c
+++ b/trunk/net/netfilter/nf_conntrack_h323_asn1.c
@@ -518,7 +518,7 @@ int decode_seq(bitstr_t * bs, field_t * f, char *base, int level)
 			CHECK_BOUND(bs, 2);
 			len = get_len(bs);
 			CHECK_BOUND(bs, len);
-			if (!base) {
+			if (!base || !(son->attr & DECODE)) {
 				PRINT("%*.s%s\n", (level + 1) * TAB_SIZE,
 				      " ", son->name);
 				bs->cur += len;
@@ -704,6 +704,8 @@ int decode_choice(bitstr_t * bs, field_t * f, char *base, int level)
 	} else {
 		ext = 0;
 		type = get_bits(bs, f->sz);
+		if (type >= f->lb)
+			return H323_ERROR_RANGE;
 	}
 
 	/* Write Type */