time: Validate user input in compat_settimeofday()
mainline inclusion from mainline-v5.2 commit 9176ab1b category: bugfix bugzilla: 16631 CVE: NA --------------------------- The user value is validated after converting the timeval to a timespec, but for a wide range of negative tv_usec values the multiplication overflow turns them in positive numbers. So the 'validated later' is not catching the invalid input. Signed-off-by:zhengbin <zhengbin13@huawei.com> Signed-off-by:
Thomas Gleixner <tglx@linutronix.de> Link: https://lkml.kernel.org/r/1562460701-113301-1-git-send-email-zhengbin13@huawei.com Signed-off-by:
Yang Yingliang <yangyingliang@huawei.com> Reviewed-by:
Xiongfeng Wang <wangxiongfeng2@huawei.com> Signed-off-by:
Yang Yingliang <yangyingliang@huawei.com>
Please register or sign in to comment