diff options
| author | Ehsan Mohandesi <emohandesi@linux.microsoft.com> | 2023-05-18 11:24:38 -0700 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2023-07-27 13:39:07 -0400 |
| commit | a29df56eab4ad7957649834c1120c69ce03115ee (patch) | |
| tree | a7f4fb8491b7bb9842454d0ac772f6fff94dbbc5 /drivers/timer/omap-timer.c | |
| parent | c98c401dfb485b39c7453a4147b17cd4b8d10c67 (diff) | |
net: ipv6: router advertisement message length should be within limits
The argument len passed to function process_ra is the length of the IPv6
router advertisement message and needs to be between 0 and MTU because
it is assigned to remaining_option_len and used as a loop variable.
Addresses-Coverity-ID: 450971 ("TAINTED_SCALAR")
Signed-off-by: Ehsan Mohandesi <emohandesi@linux.microsoft.com>
Reviewed-by: Viacheslav Mitrofanov <v.v.mitrofanov@yadro.com>
Reviewed-by: Ramon Fried <rfried.dev@gmail.com>
Diffstat (limited to 'drivers/timer/omap-timer.c')
0 files changed, 0 insertions, 0 deletions