diff options
| author |   Dan Carpenter <dan.carpenter@oracle.com> | 2021-08-30 11:37:17 +0300 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2021-08-30 12:26:57 +0100 |
| commit | aaa8e4922c887ff47ad66ef918193682bccc1905 (patch) | |
| tree | bdedc982e850092ab7fced04a915278f406fb49e /net/sched/sch_htb.c | |
| parent | fix array-index-out-of-bounds in taprio_change (diff) | |
| download | linux-dev-aaa8e4922c887ff47ad66ef918193682bccc1905.tar.xz linux-dev-aaa8e4922c887ff47ad66ef918193682bccc1905.zip | |
net: qrtr: make checks in qrtr_endpoint_post() stricter
These checks are still not strict enough. The main problem is that if
"cb->type == QRTR_TYPE_NEW_SERVER" is true then "len - hdrlen" is
guaranteed to be 4 but we need to be at least 16 bytes. In fact, we
can reject everything smaller than sizeof(*pkt) which is 20 bytes.
Also I don't like the ALIGN(size, 4). It's better to just insist that
data is needs to be aligned at the start.
Fixes: 0baa99ee353c ("net: qrtr: Allow non-immediate node routing")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched/sch_htb.c')
0 files changed, 0 insertions, 0 deletions