提交 5a3b886c 编写于 作者: M Matthias Rosenfelder 提交者: David S. Miller

TLS: Fix length check in do_tls_getsockopt_tx()

copy_to_user() copies the struct the pointer is pointing to, but the
length check compares against sizeof(pointer) and not sizeof(struct).
On 32-bit the size is probably the same, so it might have worked
accidentally.
Signed-off-by: NMatthias Rosenfelder <mrosenfelder.lkml@gmail.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
上级 e8f37d57
......@@ -272,7 +272,7 @@ static int do_tls_getsockopt_tx(struct sock *sk, char __user *optval,
goto out;
}
if (len == sizeof(crypto_info)) {
if (len == sizeof(*crypto_info)) {
if (copy_to_user(optval, crypto_info, sizeof(*crypto_info)))
rc = -EFAULT;
goto out;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册