X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv6%2Fdatagram.c;h=0f0f94a40335e7a24a68181f1791d164d49cd3e2;hb=67f5cd0f6ad86f8faacd0c00ffd0d38f228bad8e;hp=b9c2de84a8a212d137e1ba0c17bc1125dd5b288d;hpb=06a1578e2448112d6f635b1a458a65e36f0f97c6;p=linux-2.6

diff --git a/net/ipv6/datagram.c b/net/ipv6/datagram.c
index b9c2de84a8..0f0f94a403 100644
--- a/net/ipv6/datagram.c
+++ b/net/ipv6/datagram.c
@@ -705,6 +705,11 @@ int datagram_send_ctl(struct net *net,
 			}
 
 			*hlimit = *(int *)CMSG_DATA(cmsg);
+			if (*hlimit < -1 || *hlimit > 0xff) {
+				err = -EINVAL;
+				goto exit_f;
+			}
+
 			break;
 
 		case IPV6_TCLASS: