Skip to content
Commit 0033b34a authored by Eric Biggers's avatar Eric Biggers Committed by David S. Miller
Browse files

ppp: fix out-of-bounds access in bpf_prog_create()



sock_fprog_kern::len is in units of struct sock_filter, not bytes.

Fixes: 3e859adf ("compat_ioctl: unify copy-in of ppp filters")
Reported-by: default avatar <syzbot+eb853b51b10f1befa0b7@syzkaller.appspotmail.com>
Signed-off-by: default avatarEric Biggers <ebiggers@google.com>
Reviewed-by: default avatarArnd Bergmann <arnd@arndb.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent a116f4e2
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment