mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-29 22:02:02 +00:00
net: spider_net: Use size_add() in call to struct_size()
If, for any reason, the open-coded arithmetic causes a wraparound,
the protection that `struct_size()` adds against potential integer
overflows is defeated. Fix this by hardening call to `struct_size()`
with `size_add()`.
Fixes: 3f1071ec39
("net: spider_net: Use struct_size() helper")
Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Geoff Levand <geoff@infradead.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
2506a91734
commit
0201409079
1 changed files with 1 additions and 1 deletions
|
@ -2332,7 +2332,7 @@ spider_net_alloc_card(void)
|
|||
struct spider_net_card *card;
|
||||
|
||||
netdev = alloc_etherdev(struct_size(card, darray,
|
||||
tx_descriptors + rx_descriptors));
|
||||
size_add(tx_descriptors, rx_descriptors)));
|
||||
if (!netdev)
|
||||
return NULL;
|
||||
|
||||
|
|
Loading…
Reference in a new issue