| commit | 98e7e0e67a3272921c3545a81db4ceda617759c3 | [log] [tgz] |
|---|---|---|
| author | Andrey Konovalov <andreyknvl@google.com> | Wed Mar 29 14:11:22 2017 |
| committer | ChromeOS Commit Bot <chromeos-commit-bot@chromium.org> | Wed Apr 05 18:22:00 2017 |
| tree | e9ee3eb16b75ee690c75ccea996e548a4b96ebd9 | |
| parent | 96f7f8c3135ed085822d76edd903ee21b7791c50 [diff] |
FROMLIST: net/packet: fix overflow in check for tp_reserve When calculating po->tp_hdrlen + po->tp_reserve the result can overflow. Fix by checking that tp_reserve <= INT_MAX on assign. Signed-off-by: Andrey Konovalov <andreyknvl@google.com> Acked-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Andrey Ulanov <andreyu@google.com> (am from https://patchwork.ozlabs.org/patch/744812/) BUG=b:36725429 TEST=kernel compiles Change-Id: If3698fa581bc672fc9654413d46df65c29039f1e Reviewed-on: https://chromium-review.googlesource.com/462457 Commit-Ready: Andrey Ulanov <andreyu@google.com> Tested-by: Andrey Ulanov <andreyu@google.com> Reviewed-by: Guenter Roeck <groeck@chromium.org> (cherry picked from commit aef22a619fdbed3d02d75f590915e00c7cb5ec07) Reviewed-on: https://chromium-review.googlesource.com/465603 Commit-Ready: Guenter Roeck <groeck@chromium.org> Tested-by: Guenter Roeck <groeck@chromium.org> (cherry picked from commit eea1fee930a1acf2ba0a9e823fbc0b1965759eea) Reviewed-on: https://chromium-review.googlesource.com/469032 Commit-Queue: Guenter Roeck <groeck@chromium.org>