From mboxrd@z Thu Jan 1 00:00:00 1970 From: Daniel Borkmann Subject: Re: [PATCH] packet: tpacket_snd(): fix signed/unsigned comparison Date: Tue, 28 Jul 2015 13:07:02 +0200 Message-ID: <55B76256.2040105@iogearbox.net> References: <1438081021-1321-1-git-send-email-al.drozdov@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Cc: Eric Dumazet , Willem de Bruijn , Al Viro , Eyal Birger , "Michael S. Tsirkin" , netdev@vger.kernel.org, linux-kernel@vger.kernel.org To: Alexander Drozdov , "David S. Miller" , Daniel Borkmann Return-path: In-Reply-To: <1438081021-1321-1-git-send-email-al.drozdov@gmail.com> Sender: linux-kernel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On 07/28/2015 12:57 PM, Alexander Drozdov wrote: > tpacket_fill_skb() can return a negative value (-errno) which > is stored in tp_len variable. In that case the following > condition will be (but shouldn't be) true: > > tp_len > dev->mtu + dev->hard_header_len > > as dev->mtu and dev->hard_header_len are both unsigned. > > That may lead to just returning an incorrect EMSGSIZE errno > to the user. > > Signed-off-by: Alexander Drozdov Looks good to me, thanks! Acked-by: Daniel Borkmann