X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=net%2Fcompat.c;h=89032580bd1d8aa5ef29d1395661bdd0bcfe95f1;hb=ca439c9b983ffa14e9eae6030e3ee80ad039388f;hp=f0a1ba6c8086acc65a87e519fca48853a3bd091e;hpb=b0ec636c93ddd77235bf0f023a8a95d78cb6cafe;p=~andy%2Flinux

diff --git a/net/compat.c b/net/compat.c
index f0a1ba6c808..89032580bd1 100644
--- a/net/compat.c
+++ b/net/compat.c
@@ -71,6 +71,8 @@ int get_compat_msghdr(struct msghdr *kmsg, struct compat_msghdr __user *umsg)
 	    __get_user(kmsg->msg_controllen, &umsg->msg_controllen) ||
 	    __get_user(kmsg->msg_flags, &umsg->msg_flags))
 		return -EFAULT;
+	if (kmsg->msg_namelen > sizeof(struct sockaddr_storage))
+		return -EINVAL;
 	kmsg->msg_name = compat_ptr(tmp1);
 	kmsg->msg_iov = compat_ptr(tmp2);
 	kmsg->msg_control = compat_ptr(tmp3);