diff options
| author | Ehsan Mohandesi <[email protected]> | 2023-05-18 11:24:38 -0700 |
|---|---|---|
| committer | Tom Rini <[email protected]> | 2023-07-27 13:39:07 -0400 |
| commit | a29df56eab4ad7957649834c1120c69ce03115ee (patch) | |
| tree | a7f4fb8491b7bb9842454d0ac772f6fff94dbbc5 /include/linux/linux_string.h | |
| parent | c98c401dfb485b39c7453a4147b17cd4b8d10c67 (diff) | |
net: ipv6: router advertisement message length should be within limits
The argument len passed to function process_ra is the length of the IPv6
router advertisement message and needs to be between 0 and MTU because
it is assigned to remaining_option_len and used as a loop variable.
Addresses-Coverity-ID: 450971 ("TAINTED_SCALAR")
Signed-off-by: Ehsan Mohandesi <[email protected]>
Reviewed-by: Viacheslav Mitrofanov <[email protected]>
Reviewed-by: Ramon Fried <[email protected]>
Diffstat (limited to 'include/linux/linux_string.h')
0 files changed, 0 insertions, 0 deletions