[BRIDGE]: Limit BRCTL_GET_BRIDGES to 2048 bridges.

Signed-off-by: David S. Miller <davem@davemloft.net>

[BRIDGE]: Limit BRCTL_GET_BRIDGES to 2048 bridges.
Signed-off-by: David S. Miller <davem@davemloft.net>
b3d3c59a · Alan Cox · David S. Miller · 2c7ec252 · b3d3c59a
Commit b3d3c59a authored Mar 15, 2005 by Alan Cox Committed by David S. Miller Mar 15, 2005
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

net/bridge/br_ioctl.c net/bridge/br_ioctl.c +2 -0

No files found.
--- a/net/bridge/br_ioctl.c
+++ b/net/bridge/br_ioctl.c
@@ -324,6 +324,8 @@ static int old_deviceless(void __user *uarg)
 		int *indices;
 		int ret = 0;

+		if (args[2] >= 2048)
+			return -ENOMEM;
 		indices = kmalloc(args[2]*sizeof(int), GFP_KERNEL);
 		if (indices == NULL)
 			return -ENOMEM;