diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2014-11-07 14:27:09 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-11-10 20:25:35 +0100 |
| commit | c008ba5bdc9fa830e1a349b20b0be5a137bdef7a (patch) | |
| tree | db116a813dd808850455b36ba1c5e34b523a251e /lib/stmp_device.c | |
| parent | ipv4: Use standard iovec primitive in raw_probe_proto_opt (diff) | |
| download | linux-c008ba5bdc9fa830e1a349b20b0be5a137bdef7a.tar.xz linux-c008ba5bdc9fa830e1a349b20b0be5a137bdef7a.zip | |
ipv4: Avoid reading user iov twice after raw_probe_proto_opt
Ever since raw_probe_proto_opt was added it had the problem of
causing the user iov to be read twice, once during the probe for
the protocol header and once again in ip_append_data.
This is a potential security problem since it means that whatever
we're probing may be invalid. This patch plugs the hole by
firstly advancing the iov so we don't read the same spot again,
and secondly saving what we read the first time around for use
by ip_append_data.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'lib/stmp_device.c')
0 files changed, 0 insertions, 0 deletions