Unverified Commit 8a23daf0 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9895 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liu Jian <liujian56@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/BPG6CM3MB4THVZTKHZDKWVCJK32DZ2BO/ 
 
https://gitee.com/src-openeuler/kernel/issues/IABSW1 
 
Link:https://gitee.com/openeuler/kernel/pulls/9895

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents a4c42527 dfc576f2

drivers/net/bonding/bond_options.c

+3 −3
Original line number Diff line number Diff line
@@ -1093,9 +1093,9 @@ static int bond_option_arp_ip_targets_set(struct bonding *bond, 
	__be32 target;



	if (newval->string) {

		if (!in4_pton(newval->string+1, -1, (u8 *)&target, -1, NULL)) {

			netdev_err(bond->dev, "invalid ARP target %pI4 specified\n",

				   &target);

		if (strlen(newval->string) < 1 ||

		    !in4_pton(newval->string + 1, -1, (u8 *)&target, -1, NULL)) {

			netdev_err(bond->dev, "invalid ARP target specified\n");

			return ret;

		}

		if (newval->string[0] == '+')