net/packet: fix overflow in check for tp_frame_nr
authorAndrey Konovalov <andreyknvl@google.com>
Wed, 29 Mar 2017 14:11:21 +0000 (16:11 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 30 Mar 2017 01:16:33 +0000 (01:16 +0000)
commit2cc634d0a6f09f899ea301ab074850dbe1dda300
tree2716a8394afde56ac8594dbfa35bd670a40ec939
parent6535fa560dadd28a467d2292679cbfad5dbfb00b
net/packet: fix overflow in check for tp_frame_nr

When calculating rb->frames_per_block * req->tp_block_nr the result
can overflow.

Add a check that tp_block_size * tp_block_nr <= UINT_MAX.

Since frames_per_block <= tp_block_size, the expression would
never overflow.

Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name net-packet-fix-overflow-in-check-for-tp_frame_nr.patch
net/packet/af_packet.c