ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL
authorBen Hutchings <bhutchings@solarflare.com>
Mon, 28 Jun 2010 08:44:07 +0000 (08:44 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 29 Jun 2010 08:00:29 +0000 (01:00 -0700)
commitdb048b69037e7fa6a7d9e95a1271a50dc08ae233
tree0202b5d2ed643021db2790f7fae3867d3d92a1f3
parentc22d7ac844f1cb9c6a5fd20f89ebadc2feef891b
ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL

On a 32-bit machine, info.rule_cnt >= 0x40000000 leads to integer
overflow and the buffer may be smaller than needed.  Since
ETHTOOL_GRXCLSRLALL is unprivileged, this can presumably be used for at
least denial of service.

Signed-off-by: Ben Hutchings <bhutchings@solarflare.com>
Cc: stable@kernel.org
Signed-off-by: David S. Miller <davem@davemloft.net>
net/core/ethtool.c