diff options
author | Randy Dunlap <rdunlap@xenotime.net> | 2006-03-08 16:46:08 -0800 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2006-03-08 16:46:08 -0800 |
commit | 1efa3c05f8640c37ba89d54dfaa18504d21986ce (patch) | |
tree | c777fd8a5fc44492971ac51f8299c4cbfb52f175 /arch/i386 | |
parent | 2ec5e3a867d63d04932e11c6097f63760d9be3fe (diff) |
[NET] compat ifconf: fix limits
A recent change to compat. dev_ifconf() in fs/compat_ioctl.c
causes ifconf data to be truncated 1 entry too early when copying it
to userspace. The correct amount of data (length) is returned,
but the final entry is empty (zero, not filled in).
The for-loop 'i' check should use <= to allow the final struct
ifreq32 to be copied. I also used the ifconf-corruption program
in kernel bugzilla #4746 to make sure that this change does not
re-introduce the corruption.
Signed-off-by: Randy Dunlap <rdunlap@xenotime.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'arch/i386')
0 files changed, 0 insertions, 0 deletions