From 20ed636dee408d5fb288c400394342e619a55559 Mon Sep 17 00:00:00 2001
From: Thomas Haller <thaller@redhat.com>
Date: Tue, 17 Jan 2017 18:16:11 +0100
Subject: [PATCH] sriov: avoid buffer overrun in rtnl_link_sriov_parse_vflist()

Fixes: 5d6e43ebef12deadf31fccfa46c0b34892675d36

Signed-off-by: Thomas Haller <thaller@redhat.com>
---
 lib/route/link/sriov.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/route/link/sriov.c b/lib/route/link/sriov.c
index 3721ae8..b4bc9a7 100644
--- a/lib/route/link/sriov.c
+++ b/lib/route/link/sriov.c
@@ -568,6 +568,8 @@ int rtnl_link_sriov_parse_vflist(struct rtnl_link *link, struct nlattr **tb) {
 			list_len = 0;
 			nla_for_each_nested(nla_list, t[IFLA_VF_VLAN_LIST],
 					    list_rem) {
+				if (list_len >= MAX_VLAN_LIST_LEN)
+					break;
 				vf_vlan_info[list_len] = nla_data(nla_list);
 				list_len++;
 			}