Re: [PATCH] NET: Fix function put_cmsg() which may cause usr application memory overflow

2007-12-20 Thread David Miller
From: Wei Yongjun <[EMAIL PROTECTED]> Date: Tue, 18 Dec 2007 15:19:09 +0900 > When used function put_cmsg() to copy kernel information to user > application memory, if the memory length given by user application is > not enough, by the bad length calculate of msg.msg_controllen, > put_cmsg() fu

[PATCH] NET: Fix function put_cmsg() which may cause usr application memory overflow

2007-12-17 Thread Wei Yongjun
When used function put_cmsg() to copy kernel information to user application memory, if the memory length given by user application is not enough, by the bad length calculate of msg.msg_controllen, put_cmsg() function may cause the msg.msg_controllen to be a large value, such as 0xFFF0, so