From 9974a9070c03b9ede1272c17adf5129086bf484c Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Sat, 28 Apr 2018 11:41:23 +0200 Subject: udata: refuse to put more than UINT8_MAX bytes ->len is uint8_t, so we can't handle more than this. Signed-off-by: Florian Westphal --- src/udata.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/udata.c b/src/udata.c index 6bd9651..b5a4729 100644 --- a/src/udata.c +++ b/src/udata.c @@ -74,7 +74,7 @@ bool nftnl_udata_put(struct nftnl_udata_buf *buf, uint8_t type, uint32_t len, { struct nftnl_udata *attr; - if (buf->size < len + sizeof(struct nftnl_udata)) + if (len > UINT8_MAX || buf->size < len + sizeof(struct nftnl_udata)) return false; attr = (struct nftnl_udata *)buf->end; -- cgit v1.2.3