Kris Katterjohn wrote:
This makes the filter length in sk_chk_filter() unsigned as it should be.

Signed-off-by: Kris Katterjohn <[EMAIL PROTECTED]>

This is a diff from 2.6.15.

The length should never be negative, and if the length were negative, the for
loop would fail.


-                               if (ftest->k >= (unsigned)(flen-pc-1))
+                               if (ftest->k >= flen - pc - 1)

NAK. The subtraction makes the whole expressions signed, so
a very large ftest->k is interpreted as a negative number
and passes the test.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to