* 2.4.28-rc1, more lost patches [2/10]
@ 2004-10-27 9:32 sezeroz
0 siblings, 0 replies; only message in thread
From: sezeroz @ 2004-10-27 9:32 UTC (permalink / raw)
To: linux-kernel; +Cc: marcelo.tosatti
[-- Attachment #1: Type: text/plain, Size: 32 bytes --]
[2/10] tun.c sign mishandling
[-- Attachment #2: tun_sign_mishandling.patch --]
[-- Type: application/octet-stream, Size: 430 bytes --]
already in 2.6
diff -urN 28rc1/drivers/net/tun.c 28rc1_aac/drivers/net/tun.c
--- 28rc1/drivers/net/tun.c 2004-08-08 02:26:05.000000000 +0300
+++ 28rc1_aac/drivers/net/tun.c 2004-10-24 00:58:10.000000000 +0300
@@ -188,7 +188,7 @@
size_t len = count;
if (!(tun->flags & TUN_NO_PI)) {
- if ((len -= sizeof(pi)) < 0)
+ if ((len -= sizeof(pi)) > len)
return -EINVAL;
memcpy_fromiovec((void *)&pi, iv, sizeof(pi));
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-10-27 9:34 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-10-27 9:32 2.4.28-rc1, more lost patches [2/10] sezeroz
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox