Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 03f52a0a authored by Joe Perches's avatar Joe Perches Committed by David S. Miller
Browse files

ip6mr: Add sizeof verification to MRT6_ASSERT and MT6_PIM 



Verify the length of the user-space arguments.

Signed-off-by: default avatarJoe Perches <joe@perches.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent c91f6df2

net/ipv6/ip6mr.c

+6 −0
Original line number Diff line number Diff line
@@ -1646,6 +1646,9 @@ int ip6_mroute_setsockopt(struct sock *sk, int optname, char __user *optval, uns 
	case MRT6_ASSERT:

	{

		int v;



		if (optlen != sizeof(v))

			return -EINVAL;

		if (get_user(v, (int __user *)optval))

			return -EFAULT;

		mrt->mroute_do_assert = v;
@@ -1656,6 +1659,9 @@ int ip6_mroute_setsockopt(struct sock *sk, int optname, char __user *optval, uns 
	case MRT6_PIM:

	{

		int v;



		if (optlen != sizeof(v))

			return -EINVAL;

		if (get_user(v, (int __user *)optval))

			return -EFAULT;

		v = !!v;