From: Dmitry V. Levin Date: Thu, 28 Jan 2016 23:46:56 +0000 (+0000) Subject: inet_parse_response: add a safety check X-Git-Tag: v4.12~608 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=cc09ba1a8406d4765979a679520c4c164b814a13;p=strace inet_parse_response: add a safety check * socketutils.c (inet_parse_response): Check that netlink message is large enough to contain a inet_diag_msg structure. --- diff --git a/socketutils.c b/socketutils.c index 62253044..aa821639 100644 --- a/socketutils.c +++ b/socketutils.c @@ -95,6 +95,8 @@ inet_parse_response(const char *proto_name, const void *data, int data_len, static const char zero_addr[sizeof(struct in6_addr)]; socklen_t addr_size, text_size; + if (data_len < (int) NLMSG_LENGTH(sizeof(*diag_msg))) + return false; if (diag_msg->idiag_inode != inode) return false;