X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?p=pandora-kernel.git;a=blobdiff_plain;f=net%2Fpacket%2Faf_packet.c;h=92d57aac9e955839b7394b11ba67fd6918c94446;hp=3a5a58f8baa291bdde96d49583d4ee96a5cc0fba;hb=1634172286550a62d8a0a98cf8bec5cd975fa09c;hpb=091a6de006536c50f8a30db60d994a5b083b1c7b diff --git a/net/packet/af_packet.c b/net/packet/af_packet.c index 3a5a58f8baa2..92d57aac9e95 100644 --- a/net/packet/af_packet.c +++ b/net/packet/af_packet.c @@ -3649,6 +3649,8 @@ static int packet_set_ring(struct sock *sk, union tpacket_req_u *req_u, rb->frames_per_block = req->tp_block_size/req->tp_frame_size; if (unlikely(rb->frames_per_block <= 0)) goto out; + if (unlikely(req->tp_block_size > UINT_MAX / req->tp_block_nr)) + goto out; if (unlikely((rb->frames_per_block * req->tp_block_nr) != req->tp_frame_nr)) goto out;