diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2012-09-27 22:21:19 (GMT) |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2012-10-01 21:15:06 (GMT) |
commit | f674e72ff1aad23a99c7c205473cf02c85c2ac33 (patch) | |
tree | 032274dd7d42c5feeb17fe8b944ce9709001e339 /drivers/net/can/flexcan.c | |
parent | 862096a8bbf8f992f6d0a1a8786ffd3fc7437e48 (diff) | |
download | linux-fsl-qoriq-f674e72ff1aad23a99c7c205473cf02c85c2ac33.tar.xz |
net/key/af_key.c: add range checks on ->sadb_x_policy_len
Because sizeof() is size_t then if "len" is negative, it counts as a
large positive value.
The call tree looks like:
pfkey_sendmsg()
-> pfkey_process()
-> pfkey_spdadd()
-> parse_ipsecrequests()
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/can/flexcan.c')
0 files changed, 0 insertions, 0 deletions