diff options
| author | YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> | 2005-10-04 13:00:39 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2005-10-04 13:00:39 -0700 |
| commit | 87bf9c97b4b3af8dec7b2b79cdfe7bfc0a0a03b2 (patch) | |
| tree | 4db874d395f55023d579947a63fccd3ccfcaff77 | |
| parent | dd7205ed0f022a2a5e60eb7404e6c9f49d2301c3 (diff) | |
| download | op-kernel-dev-87bf9c97b4b3af8dec7b2b79cdfe7bfc0a0a03b2.zip op-kernel-dev-87bf9c97b4b3af8dec7b2b79cdfe7bfc0a0a03b2.tar.gz | |
[IPV6]: Fix infinite loop in udp_v6_get_port().
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/ipv6/udp.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/ipv6/udp.c b/net/ipv6/udp.c index e4cad11..bf95193 100644 --- a/net/ipv6/udp.c +++ b/net/ipv6/udp.c @@ -99,7 +99,7 @@ static int udp_v6_get_port(struct sock *sk, unsigned short snum) next:; } result = best; - for(;; result += UDP_HTABLE_SIZE) { + for(i = 0; i < (1 << 16) / UDP_HTABLE_SIZE; i++, result += UDP_HTABLE_SIZE) { if (result > sysctl_local_port_range[1]) result = sysctl_local_port_range[0] + ((result - sysctl_local_port_range[0]) & @@ -107,6 +107,8 @@ static int udp_v6_get_port(struct sock *sk, unsigned short snum) if (!udp_lport_inuse(result)) break; } + if (i >= (1 << 16) / UDP_HTABLE_SIZE) + goto fail; gotit: udp_port_rover = snum = result; } else { |
