|
@@ -221,12 +221,13 @@ static int move_addr_to_user(struct sockaddr_storage *kaddr, int klen,
|
|
int err;
|
|
int err;
|
|
int len;
|
|
int len;
|
|
|
|
|
|
|
|
+ BUG_ON(klen > sizeof(struct sockaddr_storage));
|
|
err = get_user(len, ulen);
|
|
err = get_user(len, ulen);
|
|
if (err)
|
|
if (err)
|
|
return err;
|
|
return err;
|
|
if (len > klen)
|
|
if (len > klen)
|
|
len = klen;
|
|
len = klen;
|
|
- if (len < 0 || len > sizeof(struct sockaddr_storage))
|
|
|
|
|
|
+ if (len < 0)
|
|
return -EINVAL;
|
|
return -EINVAL;
|
|
if (len) {
|
|
if (len) {
|
|
if (audit_sockaddr(klen, kaddr))
|
|
if (audit_sockaddr(klen, kaddr))
|