projects / GitHub / LineageOS / android_kernel_samsung_universal7580.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 53aadcc) | patch
[DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV
authorArnaldo Carvalho de Melo <acme@ghostprotocols.net>
Wed, 28 Mar 2007 18:54:32 +0000 (11:54 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 28 Mar 2007 18:54:32 +0000 (11:54 -0700)
commit39ebc0276bada8bb70e067cb6d0eb71839c0fb08
treea6afca93101b9142523d6814db12ec09d73e58eftree | snapshot (tar.gz zip)
parent53aadcc90931dfa150f76ce9a5f9e8f3e43d57dfcommit | diff
[DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV

We were only checking if there was enough space to put the int, but
left len as specified by the (malicious) user, sigh, fix it by setting
len to sizeof(val) and transfering just one int worth of data, the one
asked for.

Also check for negative len values.

Signed-off-by: Arnaldo Carvalho de Melo <acme@ghostprotocols.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/dccp/proto.c diff | blob | blame | history