Dan Carpenter 80aa4e1096 x25: add a sanity check parsing X.25 facilities
This was found with a manual audit and I don't have a reproducer.  We
limit ->calling_len and ->called_len when we get them from
copy_from_user() in x25_ioctl() so when they come from skb->data then
we should cap them there as well.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-09-04 00:27:27 -04:00
..
2013-05-14 13:02:30 -07:00
2013-09-03 22:34:47 -04:00
2013-05-27 22:50:59 -07:00
2013-08-14 01:13:40 +02:00
2013-08-11 22:02:36 -07:00
2013-05-27 22:50:59 -07:00