aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSasha Levin <sasha.levin@oracle.com>2015-02-03 08:55:58 -0500
committerStefan Bader <stefan.bader@canonical.com>2015-05-29 11:54:15 +0200
commit45a651db06af7699d5fe780c9f5c5b05231249b3 (patch)
treef9fbf42cfcd5ef44799b12ba7e5962f53c2e392d
parentf9f178c3d3f8b4ee6b92a39246ffe1e23ae8ca55 (diff)
downloadlinux-2.6.32.y-drm33.z-45a651db06af7699d5fe780c9f5c5b05231249b3.tar.gz
net: rds: use correct size for max unacked packets and bytes
commit db27ebb111e9f69efece08e4cb6a34ff980f8896 upstream. Max unacked packets/bytes is an int while sizeof(long) was used in the sysctl table. This means that when they were getting read we'd also leak kernel memory to userspace along with the timeout values. Signed-off-by: Sasha Levin <sasha.levin@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Ben Hutchings <ben@decadent.org.uk> (cherry picked from commit 3760b67b3e419b9ac42a45417491360a14a35357) Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
-rw-r--r--net/rds/sysctl.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/net/rds/sysctl.c b/net/rds/sysctl.c
index 307dc5c1be153..870e808f1419c 100644
--- a/net/rds/sysctl.c
+++ b/net/rds/sysctl.c
@@ -74,7 +74,7 @@ static ctl_table rds_sysctl_rds_table[] = {
.ctl_name = CTL_UNNUMBERED,
.procname = "max_unacked_packets",
.data = &rds_sysctl_max_unacked_packets,
- .maxlen = sizeof(unsigned long),
+ .maxlen = sizeof(int),
.mode = 0644,
.proc_handler = &proc_dointvec,
},
@@ -82,7 +82,7 @@ static ctl_table rds_sysctl_rds_table[] = {
.ctl_name = CTL_UNNUMBERED,
.procname = "max_unacked_bytes",
.data = &rds_sysctl_max_unacked_bytes,
- .maxlen = sizeof(unsigned long),
+ .maxlen = sizeof(int),
.mode = 0644,
.proc_handler = &proc_dointvec,
},