X-Git-Url: http://git.samba.org/samba.git/?p=sfrench%2Fcifs-2.6.git;a=blobdiff_plain;f=security%2Fselinux%2Fhooks.c;h=a67459eb62d5c8d3066a72c354f13894f68be8ae;hp=7ce683259357750cdfd25feb978ee1d6a984312b;hb=da5322e65940e4e8426613a8ff3d99a08b350a52;hpb=dad4f140edaa3f6bb452b6913d41af1ffd672e45

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index 7ce683259357..a67459eb62d5 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -5318,6 +5318,9 @@ static int selinux_sctp_bind_connect(struct sock *sk, int optname,
 	addr_buf = address;
 
 	while (walk_size < addrlen) {
+		if (walk_size + sizeof(sa_family_t) > addrlen)
+			return -EINVAL;
+
 		addr = addr_buf;
 		switch (addr->sa_family) {
 		case AF_UNSPEC: