Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758903AbcCDJCy (ORCPT ); Fri, 4 Mar 2016 04:02:54 -0500 Received: from mx2.suse.de ([195.135.220.15]:59626 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758797AbcCDJCp (ORCPT ); Fri, 4 Mar 2016 04:02:45 -0500 X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "References" From: Jiri Slaby To: stable@vger.kernel.org Cc: linux-kernel@vger.kernel.org, Ursula Braun , "David S . Miller" , Jiri Slaby Subject: [PATCH 3.12 003/116] af_iucv: Validate socket address length in iucv_sock_bind() Date: Fri, 4 Mar 2016 10:00:48 +0100 Message-Id: <28103f2f1fb676a2b305ed6e15f83a8a84906d45.1457082108.git.jslaby@suse.cz> X-Mailer: git-send-email 2.7.2 In-Reply-To: References: In-Reply-To: References: Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 971 Lines: 33 From: Ursula Braun 3.12-stable review patch. If anyone has any objections, please let me know. =============== [ Upstream commit 52a82e23b9f2a9e1d429c5207f8575784290d008 ] Signed-off-by: Ursula Braun Reported-by: Dmitry Vyukov Reviewed-by: Evgeny Cherkashin Signed-off-by: David S. Miller Signed-off-by: Jiri Slaby --- net/iucv/af_iucv.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/iucv/af_iucv.c b/net/iucv/af_iucv.c index 1465363a452b..bb3969a40b8e 100644 --- a/net/iucv/af_iucv.c +++ b/net/iucv/af_iucv.c @@ -697,6 +697,9 @@ static int iucv_sock_bind(struct socket *sock, struct sockaddr *addr, if (!addr || addr->sa_family != AF_IUCV) return -EINVAL; + if (addr_len < sizeof(struct sockaddr_iucv)) + return -EINVAL; + lock_sock(sk); if (sk->sk_state != IUCV_OPEN) { err = -EBADFD; -- 2.7.2