diff options
author | David S. Miller <davem@davemloft.net> | 2008-06-11 18:11:16 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2008-06-11 18:11:16 -0700 |
commit | a4056573873dc9fc506ce9293c4d01670101a637 (patch) | |
tree | c73ada69fe049ed0feaf744cc060985d00120bf9 /net/ipv6/datagram.c | |
parent | 5cb960a80531211379f8f05c575725d7630098fe (diff) | |
parent | 1717699cd5130009b7cd6756e883d8582c1fe706 (diff) |
Merge branch 'net-2.6-misc-20080611a' of git://git.linux-ipv6.org/gitroot/yoshfuji/linux-2.6-fix
Diffstat (limited to 'net/ipv6/datagram.c')
-rw-r--r-- | net/ipv6/datagram.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/net/ipv6/datagram.c b/net/ipv6/datagram.c index b9c2de84a8a2..0f0f94a40335 100644 --- a/net/ipv6/datagram.c +++ b/net/ipv6/datagram.c @@ -705,6 +705,11 @@ int datagram_send_ctl(struct net *net, } *hlimit = *(int *)CMSG_DATA(cmsg); + if (*hlimit < -1 || *hlimit > 0xff) { + err = -EINVAL; + goto exit_f; + } + break; case IPV6_TCLASS: |