git.openpandora.org
/
pandora-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
2645a3c
)
sctp: Make sure N * sizeof(union sctp_addr) does not overflow.
author
David S. Miller
<davem@davemloft.net>
Sat, 21 Jun 2008 05:04:34 +0000
(22:04 -0700)
committer
David S. Miller
<davem@davemloft.net>
Sat, 21 Jun 2008 05:04:34 +0000
(22:04 -0700)
As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.
Therefore, enforce an appropriate limit.
Signed-off-by: David S. Miller <davem@davemloft.net>
No differences found