diff options
| author | Tony Luck <tony.luck@intel.com> | 2005-08-16 14:29:57 -0400 |
|---|---|---|
| committer | Tony Luck <tony.luck@intel.com> | 2005-08-16 14:29:57 -0400 |
| commit | f7001e8f1fa5369ee24f58255726a04a2019e4bd (patch) | |
| tree | 1bbdd233ad0cf2e0adb4eb04f22b7bfa59a43494 /net | |
| parent | 85f265d887d2389376f1caa191e9682085feb76e (diff) | |
| parent | cf59001235c5a36f3e3701bd593a78cf955a4242 (diff) | |
Auto-update from upstream
Diffstat (limited to 'net')
| -rw-r--r-- | net/sunrpc/xdr.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/sunrpc/xdr.c b/net/sunrpc/xdr.c index 8a4d9c106af1..fde16f40a581 100644 --- a/net/sunrpc/xdr.c +++ b/net/sunrpc/xdr.c | |||
| @@ -993,6 +993,7 @@ xdr_xcode_array2(struct xdr_buf *buf, unsigned int base, | |||
| 993 | return -EINVAL; | 993 | return -EINVAL; |
| 994 | } else { | 994 | } else { |
| 995 | if (xdr_decode_word(buf, base, &desc->array_len) != 0 || | 995 | if (xdr_decode_word(buf, base, &desc->array_len) != 0 || |
| 996 | desc->array_len > desc->array_maxlen || | ||
| 996 | (unsigned long) base + 4 + desc->array_len * | 997 | (unsigned long) base + 4 + desc->array_len * |
| 997 | desc->elem_size > buf->len) | 998 | desc->elem_size > buf->len) |
| 998 | return -EINVAL; | 999 | return -EINVAL; |