Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 253eacc0 authored by Linus Torvalds's avatar Linus Torvalds Committed by David S. Miller
Browse files

net: Truncate recvfrom and sendto length to INT_MAX. 



Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent d139ff09

net/socket.c

+4 −0
Original line number Diff line number Diff line
@@ -1652,6 +1652,8 @@ SYSCALL_DEFINE6(sendto, int, fd, void __user *, buff, size_t, len, 
	struct iovec iov;

	int fput_needed;



	if (len > INT_MAX)

		len = INT_MAX;

	sock = sockfd_lookup_light(fd, &err, &fput_needed);

	if (!sock)

		goto out;
@@ -1709,6 +1711,8 @@ SYSCALL_DEFINE6(recvfrom, int, fd, void __user *, ubuf, size_t, size, 
	int err, err2;

	int fput_needed;



	if (size > INT_MAX)

		size = INT_MAX;

	sock = sockfd_lookup_light(fd, &err, &fput_needed);

	if (!sock)

		goto out;