From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: From: Luis Henriques To: linux-kernel@vger.kernel.org, stable@vger.kernel.org, kernel-team@lists.ubuntu.com Cc: Masatake YAMATO , "David S. Miller" , Luis Henriques Subject: [PATCH 064/102] genetlink: trigger BUG_ON if a group name is too long Date: Mon, 8 Apr 2013 10:50:19 +0100 Message-Id: <1365414657-29191-65-git-send-email-luis.henriques@canonical.com> In-Reply-To: <1365414657-29191-1-git-send-email-luis.henriques@canonical.com> References: <1365414657-29191-1-git-send-email-luis.henriques@canonical.com> Sender: linux-kernel-owner@vger.kernel.org List-ID: 3.5.7.10 -stable review patch. If anyone has any objections, please let me know. ------------------ From: Masatake YAMATO commit f1e79e208076ffe7bad97158275f1c572c04f5c7 upstream. Trigger BUG_ON if a group name is longer than GENL_NAMSIZ. Signed-off-by: Masatake YAMATO Signed-off-by: David S. Miller Signed-off-by: Luis Henriques --- net/netlink/genetlink.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/netlink/genetlink.c b/net/netlink/genetlink.c index 2cc7c1e..4be473d 100644 --- a/net/netlink/genetlink.c +++ b/net/netlink/genetlink.c @@ -142,6 +142,7 @@ int genl_register_mc_group(struct genl_family *family, int err = 0; BUG_ON(grp->name[0] == '\0'); + BUG_ON(memchr(grp->name, '\0', GENL_NAMSIZ) == NULL); genl_lock(); -- 1.8.1.2