diff options
| author | Michael Pratt <mpratt@google.com> | 2020-01-30 09:13:36 -0800 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-01-30 09:14:31 -0800 |
| commit | ede8dfab3760afc8063c3418f217e52f7ec70d42 (patch) | |
| tree | a51f17db38b31f257edc9dc471658f8fde3cb87f /pkg/tcpip/transport | |
| parent | ec0679737e8f9ab31ef6c7c3adb5a0005586b5a7 (diff) | |
Enforce splice offset limits
Splice must not allow negative offsets. Writes also must not allow offset +
size to overflow int64. Reads are similarly broken, but not just in splice
(b/148095030).
Reported-by: syzbot+0e1ff0b95fb2859b4190@syzkaller.appspotmail.com
PiperOrigin-RevId: 292361208
Diffstat (limited to 'pkg/tcpip/transport')
0 files changed, 0 insertions, 0 deletions