hey chris,
after applying your 4 patches on top of linux-2.6.0
+ experimental net,
found 2 last unchecked memcpy_fromiovec in tun.c
patch bellow fixes the second call,
the first is beyond me, please complete this patch :)
compile tested
thx max
--- linux-2.6.0-net/drivers/net/tun.c 2003-12-19 11:27:38.000000000 +0100
+++ linux/drivers/net/tun.c 2003-12-19 11:19:33.000000000 +0100
@@ -193,7 +193,10 @@
}
skb_reserve(skb, 2);
- memcpy_fromiovec(skb_put(skb, len), iv, len);
+ if (memcpy_fromiovec(skb_put(skb, len), iv, len)) {
+ kfree_skb(skb);
+ return -EFAULT;
+ }
skb->dev = tun->dev;
switch (tun->flags & TUN_TYPE_MASK) {
pgpfGHj6HAdMF.pgp
Description: PGP signature
|