releases/2.6.36.2/net-truncate-recvfrom-and-sendto-length-to-int_max.patch

   1 From 253eacc070b114c2ec1f81b067d2fed7305467b0 Mon Sep 17 00:00:00 2001
   2 From: Linus Torvalds <torvalds@linux-foundation.org>
   3 Date: Sat, 30 Oct 2010 16:43:10 -0700
   4 Subject: net: Truncate recvfrom and sendto length to INT_MAX.
   5
   6 From: Linus Torvalds <torvalds@linux-foundation.org>
   7
   8 commit 253eacc070b114c2ec1f81b067d2fed7305467b0 upstream.
   9
  10 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  11 Signed-off-by: David S. Miller <davem@davemloft.net>
  12 Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  13
  14 ---
  15  net/socket.c |    4 ++++
  16  1 file changed, 4 insertions(+)
  17
  18 --- a/net/socket.c
  19 +++ b/net/socket.c
  20 @@ -1651,6 +1651,8 @@ SYSCALL_DEFINE6(sendto, int, fd, void __
  21         struct iovec iov;
  22         int fput_needed;
  23
  24 +       if (len > INT_MAX)
  25 +               len = INT_MAX;
  26         sock = sockfd_lookup_light(fd, &err, &fput_needed);
  27         if (!sock)
  28                 goto out;
  29 @@ -1708,6 +1710,8 @@ SYSCALL_DEFINE6(recvfrom, int, fd, void
  30         int err, err2;
  31         int fput_needed;
  32
  33 +       if (size > INT_MAX)
  34 +               size = INT_MAX;
  35         sock = sockfd_lookup_light(fd, &err, &fput_needed);
  36         if (!sock)
  37                 goto out;