Matthias Rosenfelder 5a3b886c3c TLS: Fix length check in do_tls_getsockopt_tx() ...

copy_to_user() copies the struct the pointer is pointing to, but the
length check compares against sizeof(pointer) and not sizeof(struct).
On 32-bit the size is probably the same, so it might have worked
accidentally.

Signed-off-by: Matthias Rosenfelder <mrosenfelder.lkml@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-07-06 10:58:19 +01:00

10 KiB

Raw Blame History

View Raw