From: Ilpo Järvinen <ilpo.jarvinen@helsinki.fi>
Date: Mon, 5 Jan 2009 01:27:31 +0000 (-0800)
Subject: ipv6: IPV6_PKTINFO relied userspace providing correct length
X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=914d11647b6d6fe81bdf0c059612ee36282b8cee;p=linux-beck.git

ipv6: IPV6_PKTINFO relied userspace providing correct length

Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@helsinki.fi>
Reported-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

diff --git a/net/ipv6/ipv6_sockglue.c b/net/ipv6/ipv6_sockglue.c
index eeeaad2e8b5c..40f324655e24 100644
--- a/net/ipv6/ipv6_sockglue.c
+++ b/net/ipv6/ipv6_sockglue.c
@@ -404,7 +404,7 @@ sticky_done:
 		else if (optlen < sizeof(struct in6_pktinfo) || optval == NULL)
 			goto e_inval;
 
-		if (copy_from_user(&pkt, optval, optlen)) {
+		if (copy_from_user(&pkt, optval, sizeof(struct in6_pktinfo))) {
 				retv = -EFAULT;
 				break;
 		}