]> git.karo-electronics.de Git - karo-tx-linux.git/commit
ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL
authorBen Hutchings <bhutchings@solarflare.com>
Mon, 28 Jun 2010 08:44:07 +0000 (08:44 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 2 Aug 2010 17:29:49 +0000 (10:29 -0700)
commitb2ae72c4a8c172cd4fbe987c0f90764e5b63c55c
treeb74b18bae4a5ac610ff3161cb68c35422ab21fef
parent4d8712a629029881f096736ea7aebe57f2dde2e2
ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL

commit db048b69037e7fa6a7d9e95a1271a50dc08ae233 upstream.

On a 32-bit machine, info.rule_cnt >= 0x40000000 leads to integer
overflow and the buffer may be smaller than needed.  Since
ETHTOOL_GRXCLSRLALL is unprivileged, this can presumably be used for at
least denial of service.

Signed-off-by: Ben Hutchings <bhutchings@solarflare.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/core/ethtool.c