Revision 735ce972fbc8a65fb17788debd7bbe7b4383cc62 authored by David S. Miller on 21 June 2008, 05:04:34 UTC, committed by David S. Miller on 21 June 2008, 05:04:34 UTC
As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.

Therefore, enforce an appropriate limit.

Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 2645a3c
History
File Mode Size
Makefile -rw-r--r-- 192 bytes
autoprobe.c -rw-r--r-- 4.7 KB
chip.c -rw-r--r-- 15.0 KB
devres.c -rw-r--r-- 2.4 KB
handle.c -rw-r--r-- 6.2 KB
internals.h -rw-r--r-- 1.7 KB
manage.c -rw-r--r-- 14.7 KB
migration.c -rw-r--r-- 1.6 KB
proc.c -rw-r--r-- 4.2 KB
resend.c -rw-r--r-- 2.0 KB
spurious.c -rw-r--r-- 6.1 KB

back to top