Re: [PATCH net-next v1 3/4] tipc: safely copy UDP netlink data from user

2016-03-06 Thread David Miller
From: Richard Alpe Date: Thu, 3 Mar 2016 14:20:42 +0100 > The netlink policy for TIPC_NLA_UDP_LOCAL and TIPC_NLA_UDP_REMOTE > is of type binary with a defined length. This causes the policy > framework to threat the defined length as maximum length. > > There is however no protection against a u

[PATCH net-next v1 3/4] tipc: safely copy UDP netlink data from user

2016-03-03 Thread Richard Alpe
The netlink policy for TIPC_NLA_UDP_LOCAL and TIPC_NLA_UDP_REMOTE is of type binary with a defined length. This causes the policy framework to threat the defined length as maximum length. There is however no protection against a user sending a smaller amount of data. Prior to this patch this wasn'