Re: [PATCH] sit: fix off-by-one in ipip6_tunnel_get_prl
From: David Miller <davem@davemloft.net>
Date: 2009-09-30 23:39:48
From: David Miller <davem@davemloft.net>
Date: 2009-09-30 23:39:48
From: Sascha Hlusiak <redacted> Date: Tue, 29 Sep 2009 23:27:05 +0200
When requesting all prl entries (kprl.addr == INADDR_ANY) and there are more prl entries than there is space passed from userspace, the existing code would always copy cmax+1 entries, which is more than can be handled. This patch makes the kernel copy only exactly cmax entries. Signed-off-by: Sascha Hlusiak <redacted> Acked-By: Fred L. Templin <redacted>
Applied and queued up for -stable, thanks.