David S. Miller 735ce972fb sctp: Make sure N * sizeof(union sctp_addr) does not overflow. ...

As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.

Therefore, enforce an appropriate limit.

Signed-off-by: David S. Miller <davem@davemloft.net>

2008-06-20 22:04:34 -07:00

..

associola.c

sctp: Correclty set changeover_active for SFR-CACC

2008-06-16 17:00:29 -07:00

auth.c

…

bind_addr.c

…

chunk.c

…

command.c

…

debug.c

…

endpointola.c

…

input.c

…

inqueue.c

…

ipv6.c

sctp: Fix ECN markings for IPv6

2008-06-04 12:40:15 -07:00

Kconfig

…

Makefile

…

objcnt.c

…

output.c

sctp: Fix ECN markings for IPv6

2008-06-04 12:40:15 -07:00

outqueue.c

sctp: Flush the queue only once during fast retransmit.

2008-06-04 12:39:36 -07:00

primitive.c

…

proc.c

…

protocol.c

sctp: Correctly cleanup procfs entries upon failure.

2008-06-16 16:59:55 -07:00

sm_make_chunk.c

…

sm_sideeffect.c

…

sm_statefuns.c

…

sm_statetable.c

…

socket.c

sctp: Make sure N * sizeof(union sctp_addr) does not overflow.

2008-06-20 22:04:34 -07:00

ssnmap.c

…

sysctl.c

…

transport.c

sctp: Start T3-RTX timer when fast retransmitting lowest TSN

2008-06-04 12:39:11 -07:00

tsnmap.c

…

ulpevent.c

…

ulpqueue.c

…