diff options
| author | Willem de Bruijn <willemb@google.com> | 2019-04-29 11:53:18 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2019-05-01 11:28:35 -0400 |
| commit | 486efdc8f6ce802b27e15921d2353cc740c55451 (patch) | |
| tree | 38f6396a1f53717bdd1247a75abb4e632fe2e2ea /mm/mmap.c | |
| parent | b2cf86e1563e33a14a1c69b3e508d15dc12f804c (diff) | |
| download | linux-486efdc8f6ce802b27e15921d2353cc740c55451.tar.gz linux-486efdc8f6ce802b27e15921d2353cc740c55451.tar.bz2 linux-486efdc8f6ce802b27e15921d2353cc740c55451.zip | |
packet: validate msg_namelen in send directly
Packet sockets in datagram mode take a destination address. Verify its
length before passing to dev_hard_header.
Prior to 2.6.14-rc3, the send code ignored sll_halen. This is
established behavior. Directly compare msg_namelen to dev->addr_len.
Change v1->v2: initialize addr in all paths
Fixes: 6b8d95f1795c4 ("packet: validate address length if non-zero")
Suggested-by: David Laight <David.Laight@aculab.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'mm/mmap.c')
0 files changed, 0 insertions, 0 deletions