diff options
| author | Andrey Konovalov <andreyknvl@google.com> | 2017-03-29 16:11:21 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-03-30 11:03:59 -0700 |
| commit | 8f8d28e4d6d815a391285e121c3a53a0b6cb9e7b (patch) | |
| tree | 624d40509e1e573450288151977e59c36da05fc6 /net/ieee802154/nl_policy.c | |
| parent | 2b6867c2ce76c596676bec7d2d525af525fdc6e2 (diff) | |
net/packet: fix overflow in check for tp_frame_nr
When calculating rb->frames_per_block * req->tp_block_nr the result
can overflow.
Add a check that tp_block_size * tp_block_nr <= UINT_MAX.
Since frames_per_block <= tp_block_size, the expression would
never overflow.
Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ieee802154/nl_policy.c')
0 files changed, 0 insertions, 0 deletions