Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2062cc20 authored by Dan Carpenter's avatar Dan Carpenter Committed by David S. Miller
Browse files

bridge: make buffer larger in br_setlink() 



We pass IFLA_BRPORT_MAX to nla_parse_nested() so we need
IFLA_BRPORT_MAX + 1 elements.  Also Smatch complains that we read past
the end of the array when in br_set_port_flag() when it's called with
IFLA_BRPORT_FAST_LEAVE.

Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Acked-by: default avatarStephen Hemminger <shemminger@vyatta.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 65d2897c

net/bridge/br_netlink.c

+1 −1
Original line number Diff line number Diff line
@@ -239,7 +239,7 @@ int br_setlink(struct net_device *dev, struct nlmsghdr *nlh) 
	struct ifinfomsg *ifm;

	struct nlattr *protinfo;

	struct net_bridge_port *p;

	struct nlattr *tb[IFLA_BRPORT_MAX];

	struct nlattr *tb[IFLA_BRPORT_MAX + 1];

	int err;



	ifm = nlmsg_data(nlh);