X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?p=pandora-kernel.git;a=blobdiff_plain;f=net%2Fpacket%2Faf_packet.c;h=92d57aac9e955839b7394b11ba67fd6918c94446;hp=3a5a58f8baa291bdde96d49583d4ee96a5cc0fba;hb=1634172286550a62d8a0a98cf8bec5cd975fa09c;hpb=091a6de006536c50f8a30db60d994a5b083b1c7b

diff --git a/net/packet/af_packet.c b/net/packet/af_packet.c
index 3a5a58f8baa2..92d57aac9e95 100644
--- a/net/packet/af_packet.c
+++ b/net/packet/af_packet.c
@@ -3649,6 +3649,8 @@ static int packet_set_ring(struct sock *sk, union tpacket_req_u *req_u,
 		rb->frames_per_block = req->tp_block_size/req->tp_frame_size;
 		if (unlikely(rb->frames_per_block <= 0))
 			goto out;
+		if (unlikely(req->tp_block_size > UINT_MAX / req->tp_block_nr))
+			goto out;
 		if (unlikely((rb->frames_per_block * req->tp_block_nr) !=
 					req->tp_frame_nr))
 			goto out;