net: Truncate recvfrom and sendto length to INT_MAX.
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
d139ff0907
commit
253eacc070
|
@ -1652,6 +1652,8 @@ SYSCALL_DEFINE6(sendto, int, fd, void __user *, buff, size_t, len,
|
||||||
struct iovec iov;
|
struct iovec iov;
|
||||||
int fput_needed;
|
int fput_needed;
|
||||||
|
|
||||||
|
if (len > INT_MAX)
|
||||||
|
len = INT_MAX;
|
||||||
sock = sockfd_lookup_light(fd, &err, &fput_needed);
|
sock = sockfd_lookup_light(fd, &err, &fput_needed);
|
||||||
if (!sock)
|
if (!sock)
|
||||||
goto out;
|
goto out;
|
||||||
|
@ -1709,6 +1711,8 @@ SYSCALL_DEFINE6(recvfrom, int, fd, void __user *, ubuf, size_t, size,
|
||||||
int err, err2;
|
int err, err2;
|
||||||
int fput_needed;
|
int fput_needed;
|
||||||
|
|
||||||
|
if (size > INT_MAX)
|
||||||
|
size = INT_MAX;
|
||||||
sock = sockfd_lookup_light(fd, &err, &fput_needed);
|
sock = sockfd_lookup_light(fd, &err, &fput_needed);
|
||||||
if (!sock)
|
if (!sock)
|
||||||
goto out;
|
goto out;
|
||||||
|
|
Loading…
Reference in New Issue