qeth: avoid buffer overflow in snmp ioctl
authorUrsula Braun <ursula.braun@de.ibm.com>
Wed, 6 Nov 2013 08:04:52 +0000 (09:04 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 4 Dec 2013 18:50:30 +0000 (10:50 -0800)
commit401a0f388620de353625f3bc4c06916fd94122f0
tree3a80c987efff8c564bb3d8cc5abd5a8e0c7f3bbd
parentdca32a77c5eb1d824e36e459c52a4a4b1901d39a
qeth: avoid buffer overflow in snmp ioctl

commit 6fb392b1a63ae36c31f62bc3fc8630b49d602b62 upstream.

Check user-defined length in snmp ioctl request and allow request
only if it fits into a qeth command buffer.

Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
Signed-off-by: Frank Blaschka <frank.blaschka@de.ibm.com>
Reviewed-by: Heiko Carstens <heicars2@linux.vnet.ibm.com>
Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/s390/net/qeth_core_main.c