summaryrefslogtreecommitdiffstats
path: root/net/tipc/handler.c
diff options
context:
space:
mode:
authorYann Droneaud <ydroneaud@opteya.com>2013-12-11 23:01:52 +0100
committerRoland Dreier <roland@purestorage.com>2013-12-20 10:54:33 -0800
commit6bcca3d4a3bcc9859cf001a0a21c8796edae2dc0 (patch)
treea577a4d85acbb4fef1b1c4f28929ed12f20310aa /net/tipc/handler.c
parent98a37510ec1452817600d8ea47cff1d9f8d9bec8 (diff)
IB/uverbs: Check input length in flow steering uverbs
Since ib_copy_from_udata() doesn't check yet the available input data length before accessing userspace memory, an explicit check of this length is required to prevent: - reading past the user provided buffer, - underflow when subtracting the expected command size from the input length. This will ensure the newly added flow steering uverbs don't try to process truncated commands. Link: http://marc.info/?i=cover.1386798254.git.ydroneaud@opteya.com> Signed-off-by: Yann Droneaud <ydroneaud@opteya.com> Signed-off-by: Roland Dreier <roland@purestorage.com>
Diffstat (limited to 'net/tipc/handler.c')
0 files changed, 0 insertions, 0 deletions