diff options
| author | Patrick McHardy <kaber@trash.net> | 2007-07-10 23:06:43 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2007-07-10 23:06:43 -0700 |
| commit | 3be550f34b03e5eb762f74d447ebbeba97efbd6d (patch) | |
| tree | 07881880089af5f9d8dbea1444f09e34a0100ef1 /security | |
| parent | dffe4f048b420f1af0b10a6090add0c5ea69e585 (diff) | |
[UDP]: Fix length check.
Rémi Denis-Courmont wrote:
> Right. By the way, shouldn't "len" rather be signed in there?
>
> unsigned int len;
>
> /* if we're overly short, let UDP handle it */
> len = skb->len - sizeof(struct udphdr);
> if (len <= 0)
> goto udp;
It should, but the < 0 case can't happen since __udp4_lib_rcv
already makes sure that we have at least a complete UDP header.
Anyways, this patch fixes it.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions