Commit 82bee3ae authored by Ralf Bächle's avatar Ralf Bächle Committed by David S. Miller

[ROSE]: Fix minor security hole

ROSE wasn't verifying the ndigis argument of a new route resulting in a
minor security hole.
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent b1b87255
......@@ -727,7 +727,8 @@ int rose_rt_ioctl(unsigned int cmd, void __user *arg)
}
if (rose_route.mask > 10) /* Mask can't be more than 10 digits */
return -EINVAL;
if (rose_route.ndigis > 8) /* No more than 8 digipeats */
return -EINVAL;
err = rose_add_node(&rose_route, dev);
dev_put(dev);
return err;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment