Loading net/ipv6/ipv6_sockglue.c +3 −8 Original line number Diff line number Diff line Loading @@ -735,14 +735,9 @@ static int do_ipv6_setsockopt(struct sock *sk, int level, int optname, retv = -ENOBUFS; break; } gsf = kmalloc(optlen, GFP_KERNEL); if (!gsf) { retv = -ENOBUFS; break; } retv = -EFAULT; if (copy_from_user(gsf, optval, optlen)) { kfree(gsf); gsf = memdup_user(optval, optlen); if (IS_ERR(gsf)) { retv = PTR_ERR(gsf); break; } /* numsrc >= (4G-140)/128 overflow in 32 bits */ Loading Loading
net/ipv6/ipv6_sockglue.c +3 −8 Original line number Diff line number Diff line Loading @@ -735,14 +735,9 @@ static int do_ipv6_setsockopt(struct sock *sk, int level, int optname, retv = -ENOBUFS; break; } gsf = kmalloc(optlen, GFP_KERNEL); if (!gsf) { retv = -ENOBUFS; break; } retv = -EFAULT; if (copy_from_user(gsf, optval, optlen)) { kfree(gsf); gsf = memdup_user(optval, optlen); if (IS_ERR(gsf)) { retv = PTR_ERR(gsf); break; } /* numsrc >= (4G-140)/128 overflow in 32 bits */ Loading