mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-30 14:19:16 +00:00
sch_netem: fix a divide by zero in tabledist()
[ Upstream commitb41d936b5e
] syzbot managed to crash the kernel in tabledist() loading an empty distribution table. t = dist->table[rnd % dist->size]; Simply return an error when such load is attempted. Fixes:1da177e4c3
("Linux-2.6.12-rc2") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
ac7ac130d9
commit
9850f9307d
1 changed files with 1 additions and 1 deletions
|
@ -711,7 +711,7 @@ static int get_dist_table(struct Qdisc *sch, const struct nlattr *attr)
|
||||||
int i;
|
int i;
|
||||||
size_t s;
|
size_t s;
|
||||||
|
|
||||||
if (n > NETEM_DIST_MAX)
|
if (!n || n > NETEM_DIST_MAX)
|
||||||
return -EINVAL;
|
return -EINVAL;
|
||||||
|
|
||||||
s = sizeof(struct disttable) + n * sizeof(s16);
|
s = sizeof(struct disttable) + n * sizeof(s16);
|
||||||
|
|
Loading…
Reference in a new issue