David S. Miller 735ce972fb sctp: Make sure N * sizeof(union sctp_addr) does not overflow. ...

As noticed by Gabriel Campana, the kmalloc() length arg
passed in by sctp_getsockopt_local_addrs_old() can overflow
if ->addr_num is large enough.

Therefore, enforce an appropriate limit.

Signed-off-by: David S. Miller <davem@davemloft.net>

2008-06-20 22:04:34 -07:00

..

associola.c

…

auth.c

…

bind_addr.c

…

chunk.c

…

command.c

…

debug.c

…

endpointola.c

…

input.c

…

inqueue.c

…

ipv6.c

…

Kconfig

…

Makefile

…

objcnt.c

…

output.c

…

outqueue.c

…

primitive.c

…

proc.c

…

protocol.c

…

sm_make_chunk.c

…

sm_sideeffect.c

…

sm_statefuns.c

…

sm_statetable.c

…

socket.c

…

ssnmap.c

…

sysctl.c

…

transport.c

…

tsnmap.c

…

ulpevent.c

…

ulpqueue.c

…