]> git.baikalelectronics.ru Git - kernel.git/commit
net: get rid of an signed integer overflow in ip_idents_reserve()
authorEric Dumazet <edumazet@google.com>
Wed, 21 Sep 2016 01:06:17 +0000 (18:06 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 22 Sep 2016 06:41:17 +0000 (02:41 -0400)
commitf06ada3ac8c86ace23b7c4490ac9500fa5d44dbf
tree66b36cd6c485ea989a634ab49cc937dc5451ba3d
parente97bfd464437ecb826cd425ffa4349f98056c1b2
net: get rid of an signed integer overflow in ip_idents_reserve()

Jiri Pirko reported an UBSAN warning happening in ip_idents_reserve()

[] UBSAN: Undefined behaviour in ./arch/x86/include/asm/atomic.h:156:11
[] signed integer overflow:
[] -2117905507 + -695755206 cannot be represented in type 'int'

Since we do not have uatomic_add_return() yet, use atomic_cmpxchg()
so that the arithmetics can be done using unsigned int.

Fixes: 387cacb14201 ("ip: make IP identifiers less predictable")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Jiri Pirko <jiri@resnulli.us>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/route.c