[PATCH net] ieee802154: reassembly: fix possible buffer overflow

Subsystems: networking [general], the rest

STALE4473d

2 messages, 2 authors, 2014-07-03 · open the first message on its own page

[PATCH net] ieee802154: reassembly: fix possible buffer overflow

From: Alexander Aring <alex.aring@gmail.com>
Date: 2014-06-29 11:10:32

The max_dsize attribute in ctl_table for lowpan_frags_ns_ctl_table is
configured with integer accessing methods. This patch change the
max_dsize attribute to int to avoid a possible buffer overflow.

Signed-off-by: Alexander Aring <alex.aring@gmail.com>
---
 include/net/netns/ieee802154_6lowpan.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/include/net/netns/ieee802154_6lowpan.h b/include/net/netns/ieee802154_6lowpan.h
index 079030c..e207096 100644
--- a/include/net/netns/ieee802154_6lowpan.h
+++ b/include/net/netns/ieee802154_6lowpan.h
@@ -16,7 +16,7 @@ struct netns_sysctl_lowpan {
 struct netns_ieee802154_lowpan {
 	struct netns_sysctl_lowpan sysctl;
 	struct netns_frags	frags;
-	u16			max_dsize;
+	int			max_dsize;
 };
 
 #endif
-- 
2.0.1

Re: [PATCH net] ieee802154: reassembly: fix possible buffer overflow

From: David Miller <davem@davemloft.net>
Date: 2014-07-03 01:35:09

From: Alexander Aring <alex.aring@gmail.com>
Date: Sun, 29 Jun 2014 13:10:18 +0200
The max_dsize attribute in ctl_table for lowpan_frags_ns_ctl_table is
configured with integer accessing methods. This patch change the
max_dsize attribute to int to avoid a possible buffer overflow.

Signed-off-by: Alexander Aring <alex.aring@gmail.com>
Applied, thanks.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help