This is a note to let you know that I've just added the patch titled

    net: Truncate recvfrom and sendto length to INT_MAX.

to the 2.6.27-stable tree which can be found at:
    
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     net-truncate-recvfrom-and-sendto-length-to-int_max.patch
and it can be found in the queue-2.6.27 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.


>From 253eacc070b114c2ec1f81b067d2fed7305467b0 Mon Sep 17 00:00:00 2001
From: Linus Torvalds <[email protected]>
Date: Sat, 30 Oct 2010 16:43:10 -0700
Subject: net: Truncate recvfrom and sendto length to INT_MAX.

From: Linus Torvalds <[email protected]>

commit 253eacc070b114c2ec1f81b067d2fed7305467b0 upstream.

Signed-off-by: Linus Torvalds <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>

---
 net/socket.c |    4 ++++
 1 file changed, 4 insertions(+)

--- a/net/socket.c
+++ b/net/socket.c
@@ -1691,6 +1691,8 @@ SYSCALL_DEFINE6(sendto, int, fd, void __
        struct iovec iov;
        int fput_needed;
 
+       if (len > INT_MAX)
+               len = INT_MAX;
        sock = sockfd_lookup_light(fd, &err, &fput_needed);
        if (!sock)
                goto out;
@@ -1748,6 +1750,8 @@ SYSCALL_DEFINE6(recvfrom, int, fd, void
        int err, err2;
        int fput_needed;
 
+       if (size > INT_MAX)
+               size = INT_MAX;
        sock = sockfd_lookup_light(fd, &err, &fput_needed);
        if (!sock)
                goto out;


Patches currently in stable-queue which might be from 
[email protected] are

queue-2.6.27/can-bcm-fix-minor-heap-overflow.patch
queue-2.6.27/um-fix-global-timer-issue-when-using-config_no_hz.patch
queue-2.6.27/drivers-char-vt_ioctl.c-fix-vt_openqry-error-value.patch
queue-2.6.27/percpu-fix-list_head-init-bug-in-__percpu_counter_init.patch
queue-2.6.27/usb-misc-usbled-fix-up-some-sysfs-attribute-permissions.patch
queue-2.6.27/usb-storage-sierra_ms-fix-sysfs-file-attribute.patch
queue-2.6.27/usb-atm-ueagle-atm-fix-up-some-permissions-on-the-sysfs-files.patch
queue-2.6.27/sys_semctl-fix-kernel-stack-leakage.patch
queue-2.6.27/ipc-shm-fix-information-leak-to-userland.patch
queue-2.6.27/do_exit-make-sure-that-we-run-with-get_fs-user_ds.patch
queue-2.6.27/mm-fix-return-value-of-scan_lru_pages-in-memory-unplug.patch
queue-2.6.27/ipc-initialize-structure-memory-to-zero-for-compat-functions.patch
queue-2.6.27/usb-misc-cypress_cy7c63-fix-up-some-sysfs-attribute-permissions.patch
queue-2.6.27/mm-fix-is_mem_section_removable-page_order-bug_on-check.patch
queue-2.6.27/numa-fix-slab_node-mpol_bind.patch
queue-2.6.27/net-truncate-recvfrom-and-sendto-length-to-int_max.patch
queue-2.6.27/usb-misc-trancevibrator-fix-up-a-sysfs-attribute-permission.patch

_______________________________________________
stable mailing list
[email protected]
http://linux.kernel.org/mailman/listinfo/stable

Reply via email to