Natsemi enet: catch wraparound in ETHTOOL_GEEPROM

5a35c454 · Tim Hockin · af291057 · 5a35c454
Commit 5a35c454 authored Aug 28, 2002 by Tim Hockin
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

drivers/net/natsemi.c drivers/net/natsemi.c +3 -0

No files found.
--- a/drivers/net/natsemi.c
+++ b/drivers/net/natsemi.c
@@ -2037,6 +2037,9 @@ static int netdev_ethtool_ioctl(struct net_device *dev, void *useraddr)
 		if (copy_from_user(&eeprom, useraddr, sizeof(eeprom)))
 			return -EFAULT;
 		
+		if (eeprom.offset > eeprom.offset+eeprom.len)
+			return -EINVAL;
+
 		if ((eeprom.offset+eeprom.len) > NATSEMI_EEPROM_SIZE) {
 			eeprom.len = NATSEMI_EEPROM_SIZE-eeprom.offset;
 		}