David Fries a30cfa475d cn: verify msg->len before making callback ... The struct cn_msg len field comes from userspace and needs to be validated. More logical to do so here where the cn_msg pointer is pulled out of the sk_buff than the callback which is passed cn_msg * and might assume no validation is needed. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Evgeniy Polyakov <zbr@ioremap.net> Signed-off-by: David Fries <David@Fries.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-11-26 19:09:01 -08:00
..
Kconfig	trivial: Kconfig: .ko is normally not included in module names	2009-06-12 18:01:50 +02:00
Makefile	…
cn_proc.c	connector: Use ktime_get_ns()	2014-07-23 10:18:07 -07:00
cn_queue.c	drivers: connector: fixed coding style issues	2012-07-16 23:23:52 -07:00
connector.c	cn: verify msg->len before making callback	2014-11-26 19:09:01 -08:00