net/packet: fix overflow in check for tp_reserve
authorAndrey Konovalov <andreyknvl@google.com>
Wed, 29 Mar 2017 14:11:22 +0000 (16:11 +0200)
committerDavid S. Miller <davem@davemloft.net>
Thu, 30 Mar 2017 18:04:00 +0000 (11:04 -0700)
commitbcc5364bdcfe131e6379363f089e7b4108d35b70
tree43e301600bc32c0bca913032b45b0f859600b8d1
parent8f8d28e4d6d815a391285e121c3a53a0b6cb9e7b
net/packet: fix overflow in check for tp_reserve

When calculating po->tp_hdrlen + po->tp_reserve the result can overflow.

Fix by checking that tp_reserve <= INT_MAX on assign.

Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/packet/af_packet.c