diff options
| author | Daniel Borkmann <daniel@iogearbox.net> | 2015-08-31 15:58:46 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-08-31 12:34:00 -0700 |
| commit | b8d3e4163a3562d7cba486687904383e78e7dd6a (patch) | |
| tree | 89ae9d8715c49d32593acad50712c4a6050d8969 /net/ipv4 | |
| parent | 1bb14807bc761a88bb9d319e7bf519eebf4c82ec (diff) | |
| download | op-kernel-dev-b8d3e4163a3562d7cba486687904383e78e7dd6a.zip op-kernel-dev-b8d3e4163a3562d7cba486687904383e78e7dd6a.tar.gz | |
fib, fib6: reject invalid feature bits
Feature bits that are invalid should not be accepted by the kernel,
only the lower 4 bits may be configured, but not the remaining ones.
Even from these 4, 2 of them are unused.
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4')
| -rw-r--r-- | net/ipv4/fib_semantics.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv4/fib_semantics.c b/net/ipv4/fib_semantics.c index 88afbae..115a08e 100644 --- a/net/ipv4/fib_semantics.c +++ b/net/ipv4/fib_semantics.c @@ -908,6 +908,8 @@ fib_convert_metrics(struct fib_info *fi, const struct fib_config *cfg) val = 65535 - 40; if (type == RTAX_MTU && val > 65535 - 15) val = 65535 - 15; + if (type == RTAX_FEATURES && (val & ~RTAX_FEATURE_MASK)) + return -EINVAL; fi->fib_metrics[type - 1] = val; } |
