commit 6b384de853c9f05e5e6da6c95edb475b96dd2cc1
author Allan Stephens <allan.stephens@windriver.com> Sun Jun 25 23:44:27 2006 -0700
committer David S. Miller <davem@davemloft.net> Sun Jun 25 23:44:27 2006 -0700
tree b9b26a5c1c41153eb2557480910339576583ffa6
parent e9024f0f79c3f847a793d6a16bf4fefc6d7a4649

[TIPC]: Fixed connect() to detect a dest address that is missing or too short.

Signed-off-by: Allan Stephens <allan.stephens@windriver.com>
Signed-off-by: Per Liden <per.liden@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

net/tipc/socket.c

diff --git a/net/tipc/socket.c b/net/tipc/socket.c
index 0923213..758b2d2 100644
--- a/net/tipc/socket.c
+++ b/net/tipc/socket.c
@@ -1244,7 +1244,7 @@
    if (sock->state != SS_UNCONNECTED)
            return -EISCONN;
 
-   if ((dst->family != AF_TIPC) ||
+   if ((destlen < sizeof(*dst)) || (dst->family != AF_TIPC) ||
        ((dst->addrtype != TIPC_ADDR_NAME) && (dst->addrtype != TIPC_ADDR_ID)))
            return -EINVAL;