d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux(4): Limit user-supplied sockaddr length in recvfrom().

Browse Source 
Differential Revision:	https://reviews.freebsd.org/D34726
This commit is contained in:
Dmitry Chagin 2022-04-11 23:32:28 +03:00
parent 68bfaefb3d
commit bb0f644cd6
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sys/compat/linux/linux_socket.c
View File

@ -1272,6 +1272,7 @@ linux_recvfrom(struct thread *td, struct linux_recvfrom_args *args)
return (error);
if (fromlen < 0)
return (EINVAL);
fromlen = min(fromlen, SOCK_MAXADDRLEN);
sa = malloc(fromlen, M_SONAME, M_WAITOK);
} else {
fromlen = 0;