Messages in this thread | | | Date | Sat, 19 Jul 2014 00:06:28 +0300 | Subject | Re: [PATCH 3/5] net/netfilter/ipvs/ip_vs_ctl.c: drop argument range check just before the check for equality | From | Andrey Utkin <> |
| |
2014-07-18 23:48 GMT+03:00 Julian Anastasov <ja@ssi.bg>: > The above check ensures the set_arglen[] value (some > struct size) does not exceed the arg[MAX_ARG_LEN] space. You can check > commit 04bcef2a83f40c ("ipvs: Add boundary check on ioctl arguments") > for more info.
Thanks for info. What about static check at compilation time?
#if (DAEMON_ARG_LEN > MAX_ARG_LEN) \ || (SERVICE_ARG_LEN > MAX_ARG_LEN) \ || (SVCDEST_ARG_LEN > MAX_ARG_LEN) #error MAX_ARG_LEN exceeded in set_arglen table #endif
-- Andrey Utkin
| |