From: Peilin Ye <yepeilin...@gmail.com> Date: Wed, 22 Jul 2020 12:05:12 -0400
> Checks on `addr_len` and `usax->sax25_ndigis` are insufficient. > ax25_sendmsg() can go out of bounds when `usax->sax25_ndigis` equals to 7 > or 8. Fix it. > > It is safe to remove `usax->sax25_ndigis > AX25_MAX_DIGIS`, since > `addr_len` is guaranteed to be less than or equal to > `sizeof(struct full_sockaddr_ax25)` > > Signed-off-by: Peilin Ye <yepeilin...@gmail.com> Applied.
