mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-14 15:54:15 +08:00
80aa4e1096
This was found with a manual audit and I don't have a reproducer. We limit ->calling_len and ->called_len when we get them from copy_from_user() in x25_ioctl() so when they come from skb->data then we should cap them there as well. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
---|---|---|
.. | ||
af_x25.c | ||
Kconfig | ||
Makefile | ||
sysctl_net_x25.c | ||
x25_dev.c | ||
x25_facilities.c | ||
x25_forward.c | ||
x25_in.c | ||
x25_link.c | ||
x25_out.c | ||
x25_proc.c | ||
x25_route.c | ||
x25_subr.c | ||
x25_timer.c |