From: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Date: Tue, 3 Sep 2013 12:03:40 +0300 > This was found with a manual audit and I don't have a reproducer. We > limit ->calling_len and ->called_len when we get them from > copy_from_user() in x25_ioctl() so when they come from skb->data then > we should cap them there as well. > > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Applied. -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
