Re: [PATCH 4.19 19/32] tipc: Avoid copying bytes beyond the supplied data

Hi! > From: Chris Packham > > TLV_SET is called with a data pointer and a len parameter that tells us > how many bytes are pointed to by data. When invoking memcpy() we need > to careful to only copy len bytes. This one misses upstream commit id. AFAICT, patch is upstream and hash is

[PATCH 4.19 19/32] tipc: Avoid copying bytes beyond the supplied data

From: Chris Packham TLV_SET is called with a data pointer and a len parameter that tells us how many bytes are pointed to by data. When invoking memcpy() we need to careful to only copy len bytes. Previously we would copy TLV_LENGTH(len) bytes which would copy an extra 4 bytes past the end of