Thread (3 messages) 3 messages, 2 authors, 2012-06-01

Re: [V2 PATCH] net: sock: validate data_len before allocating skb in sock_alloc_send_pskb()

From: Jason Wang <jasowang@redhat.com>
Date: 2012-06-01 03:08:11
Also in: lkml, stable

On 06/01/2012 06:21 AM, David Miller wrote:
From: Jason Wang<jasowang@redhat.com>
Date: Thu, 31 May 2012 15:18:10 +0800
quoted
We need to validate the number of pages consumed by data_len, otherwise frags
array could be overflowed by userspace. So this patch validate data_len and
return -EMSGSIZE when data_len may occupies more frags than MAX_SKB_FRAGS.

Signed-off-by: Jason Wang<jasowang@redhat.com>
Applied and queued up for -stable.

Please do not add explicit stable CC:'s to networking patches, I queue
appropriate changes up myself, and submit them only when I feel that
the change has had sufficient exposure and testing in Linus's tree.
Sure, would pay attention next time.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help