diff options
| author | Thomas Haller <thaller@redhat.com> | 2018-10-10 11:59:24 +0200 |
|---|---|---|
| committer | Thomas Haller <thaller@redhat.com> | 2018-10-10 12:04:27 +0200 |
| commit | c295d45a3b6d01ca454ddfd55a490793dd5f6356 (patch) | |
| tree | 0a01e6443fa067a1474612ed134353034cbb6b64 /src/platform/nm-netlink.h | |
| parent | 82652c141584c4ffa16a9ba6d5a82e6f27b68ddc (diff) | |
platform/netlink: fix overrun in attribute iteration in nla_ok()
See-also: https://github.com/thom311/libnl/commit/123dc07bcc3f402a500edf370d2000e171c91b34
See-also: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1045b03e07d85f3545118510a587035536030c1c
Diffstat (limited to 'src/platform/nm-netlink.h')
| -rw-r--r-- | src/platform/nm-netlink.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/platform/nm-netlink.h b/src/platform/nm-netlink.h index 1fccddb997..d5df7ab9b1 100644 --- a/src/platform/nm-netlink.h +++ b/src/platform/nm-netlink.h @@ -286,7 +286,7 @@ struct nlattr *nla_find (const struct nlattr *head, int len, int attrtype); static inline int nla_ok (const struct nlattr *nla, int remaining) { - return remaining >= sizeof(*nla) && + return remaining >= (int) sizeof(*nla) && nla->nla_len >= sizeof(*nla) && nla->nla_len <= remaining; } |