aboutsummaryrefslogtreecommitdiff
path: root/net/ipv4/tcp_input.c
diff options
context:
space:
mode:
authorDr. David Alan Gilbert <linux@treblig.org>2022-10-29 02:46:04 +0100
committerJakub Kicinski <kuba@kernel.org>2022-11-01 21:14:39 -0700
commit44827016be44c6b2634a92ebbdb3d95610ff5268 (patch)
tree1d383322e95c17805f57b861b985ad983709f60c /net/ipv4/tcp_input.c
parent6f1a298b2e24c703bfcc643e41bc7c0604fe4830 (diff)
downloadlinux-44827016be44c6b2634a92ebbdb3d95610ff5268.tar.gz
linux-44827016be44c6b2634a92ebbdb3d95610ff5268.tar.bz2
linux-44827016be44c6b2634a92ebbdb3d95610ff5268.zip
net: core: inet[46]_pton strlen len types
inet[46]_pton check the input length against a sane length limit (INET[6]_ADDRSTRLEN), but the strlen value gets truncated due to being stored in an int, so there's a theoretical potential for a >4G string to pass the limit test. Use size_t since that's what strlen actually returns. I've had a hunt for callers that could hit this, but I've not managed to find anything that doesn't get checked with some other limit first; but it's possible that I've missed something in the depth of the storage target paths. Signed-off-by: Dr. David Alan Gilbert <linux@treblig.org> Link: https://lore.kernel.org/r/20221029014604.114024-1-linux@treblig.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'net/ipv4/tcp_input.c')
0 files changed, 0 insertions, 0 deletions