diff options
author | Thomas Graf <tgraf@suug.ch> | 2008-05-28 16:54:22 +0200 |
---|---|---|
committer | YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> | 2008-06-05 04:02:31 +0900 |
commit | 24ef0da7b864435f221f668bc8a324160d063e78 (patch) | |
tree | 766e3dffc0e878bf07e4d9a4aa0b25b19d8e2785 /net/ipv6/tunnel6.c | |
parent | a3c960899e042bc1c2b730a2115fa32da7802039 (diff) | |
download | linux-3.10-24ef0da7b864435f221f668bc8a324160d063e78.tar.gz linux-3.10-24ef0da7b864435f221f668bc8a324160d063e78.tar.bz2 linux-3.10-24ef0da7b864435f221f668bc8a324160d063e78.zip |
[IPV6] ADDRCONF: Check range of prefix length
As of now, the prefix length is not vaildated when adding or deleting
addresses. The value is passed directly into the inet6_ifaddr structure
and later passed on to memcmp() as length indicator which relies on
the value never to exceed 128 (bits).
Due to the missing check, the currently code allows for any 8 bit
value to be passed on as prefix length while using the netlink
interface, and any 32 bit value while using the ioctl interface.
[Use unsigned int instead to generate better code - yoshfuji]
Signed-off-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Diffstat (limited to 'net/ipv6/tunnel6.c')
0 files changed, 0 insertions, 0 deletions