diff options
| -rw-r--r-- | net/ipv4/cipso_ipv4.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/net/ipv4/cipso_ipv4.c b/net/ipv4/cipso_ipv4.c index a056278ad626..c305de6fa206 100644 --- a/net/ipv4/cipso_ipv4.c +++ b/net/ipv4/cipso_ipv4.c | |||
| @@ -867,6 +867,8 @@ static int cipso_v4_map_cat_rbm_hton(const struct cipso_v4_doi *doi_def, | |||
| 867 | return -EPERM; | 867 | return -EPERM; |
| 868 | 868 | ||
| 869 | net_spot = host_cat_array[host_spot]; | 869 | net_spot = host_cat_array[host_spot]; |
| 870 | if (net_spot >= CIPSO_V4_INV_CAT) | ||
| 871 | return -EPERM; | ||
| 870 | if (net_spot >= net_clen_bits) | 872 | if (net_spot >= net_clen_bits) |
| 871 | return -ENOSPC; | 873 | return -ENOSPC; |
| 872 | cipso_v4_bitmap_setbit(net_cat, net_spot, 1); | 874 | cipso_v4_bitmap_setbit(net_cat, net_spot, 1); |
| @@ -935,6 +937,8 @@ static int cipso_v4_map_cat_rbm_ntoh(const struct cipso_v4_doi *doi_def, | |||
| 935 | return -EPERM; | 937 | return -EPERM; |
| 936 | 938 | ||
| 937 | host_spot = net_cat_array[net_spot]; | 939 | host_spot = net_cat_array[net_spot]; |
| 940 | if (host_spot >= CIPSO_V4_INV_CAT) | ||
| 941 | return -EPERM; | ||
| 938 | if (host_spot >= host_clen_bits) | 942 | if (host_spot >= host_clen_bits) |
| 939 | return -ENOSPC; | 943 | return -ENOSPC; |
| 940 | cipso_v4_bitmap_setbit(host_cat, host_spot, 1); | 944 | cipso_v4_bitmap_setbit(host_cat, host_spot, 1); |