diff options
| author | Alex Henrie <[email protected]> | 2023-08-31 22:41:27 -0600 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2023-09-04 07:07:30 +0100 |
| commit | f31867d0d9d82af757c1e0178b659438f4c1ea3c (patch) | |
| tree | 36ddf17125eeed141d28e332f496b45dd9835853 /drivers/platform/surface/aggregator/ssh_parser.c | |
| parent | 151e887d8ff97e2e42110ffa1fb1e6a2128fb364 (diff) | |
net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
The existing code incorrectly casted a negative value (the result of a
subtraction) to an unsigned value without checking. For example, if
/proc/sys/net/ipv6/conf/*/temp_prefered_lft was set to 1, the preferred
lifetime would jump to 4 billion seconds. On my machine and network the
shortest lifetime that avoided underflow was 3 seconds.
Fixes: 76506a986dc3 ("IPv6: fix DESYNC_FACTOR")
Signed-off-by: Alex Henrie <[email protected]>
Reviewed-by: David Ahern <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'drivers/platform/surface/aggregator/ssh_parser.c')
0 files changed, 0 insertions, 0 deletions