diff options
| author |   Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | 2015-11-30 14:32:54 -0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2015-12-02 23:39:46 -0500 |
| commit | cacc06215271104b40773c99547c506095db6ad4 (patch) | |
| tree | dfe97a192eed6a74dc5e2518d0d2662a301f12a9 /net/core/neighbour.c | |
| parent | sctp: convert sack_needed and sack_generation to bits (diff) | |
| download | linux-dev-cacc06215271104b40773c99547c506095db6ad4.tar.xz linux-dev-cacc06215271104b40773c99547c506095db6ad4.zip | |
sctp: use GFP_USER for user-controlled kmalloc
Dmitry Vyukov reported that the user could trigger a kernel warning by
using a large len value for getsockopt SCTP_GET_LOCAL_ADDRS, as that
value directly affects the value used as a kmalloc() parameter.
This patch thus switches the allocation flags from all user-controllable
kmalloc size to GFP_USER to put some more restrictions on it and also
disables the warn, as they are not necessary.
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/core/neighbour.c')
0 files changed, 0 insertions, 0 deletions