David Fries a30cfa475d cn: verify msg->len before making callback ...

The struct cn_msg len field comes from userspace and needs to be
validated.  More logical to do so here where the cn_msg pointer is
pulled out of the sk_buff than the callback which is passed cn_msg *
and might assume no validation is needed.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Evgeniy Polyakov <zbr@ioremap.net>
Signed-off-by: David Fries <David@Fries.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-11-26 19:09:01 -08:00

..

cn_proc.c

connector: Use ktime_get_ns()

2014-07-23 10:18:07 -07:00

cn_queue.c

drivers: connector: fixed coding style issues

2012-07-16 23:23:52 -07:00

connector.c

cn: verify msg->len before making callback

2014-11-26 19:09:01 -08:00

Kconfig

…

Makefile

…