net/packet: fix overflow in check for tp_frame_nr
authorAndrey Konovalov <andreyknvl@google.com>
Wed, 29 Mar 2017 14:11:21 +0000 (16:11 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 2 May 2017 15:21:44 +0000 (15:21 +0000)
commitef0a862f13fa6fc30379df0746f98ab722a29c20
treed9aadc321f25a245f7b69c33fd3b54683a07ff6c
parent0663f7cdea6d52cc15575f2acc7228a55dc42812
net/packet: fix overflow in check for tp_frame_nr

When calculating rb->frames_per_block * req->tp_block_nr the result
can overflow.

Add a check that tp_block_size * tp_block_nr <= UINT_MAX.

Since frames_per_block <= tp_block_size, the expression would
never overflow.

Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name net-packet-fix-overflow-in-check-for-tp_frame_nr.patch
net/packet/af_packet.c