diff options
| author |   Joe Perches <joe@perches.com> | 2012-11-25 18:26:34 +0000 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2012-11-26 17:35:58 -0500 |
| commit | 03f52a0a554210d5049eeed9f1bb29047dc807cb (patch) | |
| tree | 8bbbc7f22f5a124f340676281ce0901c179e412f | |
| parent | sockopt: Change getsockopt() of SO_BINDTODEVICE to return an interface name (diff) | |
| download | linux-dev-03f52a0a554210d5049eeed9f1bb29047dc807cb.tar.xz linux-dev-03f52a0a554210d5049eeed9f1bb29047dc807cb.zip | |
ip6mr: Add sizeof verification to MRT6_ASSERT and MT6_PIM
Verify the length of the user-space arguments.
Signed-off-by: Joe Perches <joe@perches.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/ipv6/ip6mr.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/net/ipv6/ip6mr.c b/net/ipv6/ip6mr.c index 79bb49061ef6..926ea544f499 100644 --- a/net/ipv6/ip6mr.c +++ b/net/ipv6/ip6mr.c @@ -1646,6 +1646,9 @@ int ip6_mroute_setsockopt(struct sock *sk, int optname, char __user *optval, uns case MRT6_ASSERT: { int v; + + if (optlen != sizeof(v)) + return -EINVAL; if (get_user(v, (int __user *)optval)) return -EFAULT; mrt->mroute_do_assert = v; @@ -1656,6 +1659,9 @@ int ip6_mroute_setsockopt(struct sock *sk, int optname, char __user *optval, uns case MRT6_PIM: { int v; + + if (optlen != sizeof(v)) + return -EINVAL; if (get_user(v, (int __user *)optval)) return -EFAULT; v = !!v; |