David Howells ef26a5a6ea Guard check in module loader against integer overflow ...

The check:

	if (len < hdr->e_shoff + hdr->e_shnum * sizeof(Elf_Shdr))

may not work if there's an overflow in the right-hand side of the condition.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

2012-05-23 22:28:53 +09:30

90 KiB

Raw Blame History

View Raw