Revision 735ce972fbc8a65fb17788debd7bbe7b4383cc62 authored by David S. Miller on 21 June 2008, 05:04:34 UTC, committed by David S. Miller on 21 June 2008, 05:04:34 UTC
As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.

Therefore, enforce an appropriate limit.

Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 2645a3c
History

back to top