Check the type of CAN socket passed to ioctl handler

diff --git a/net/can/canethgw.c b/net/can/canethgw.c
index e1e9bd2874c506c5c7e5d9a76d73c6da0c3f0cff..17753640814d0277c8baf4fd45eff675aed38270 100644 (file)
--- a/net/can/canethgw.c
+++ b/net/can/canethgw.c
@@ -297,6 +297,12 @@ static long cegw_ioctl_start(struct file *file, unsigned long arg)
                return err;
        }
 
+       if (job->can_sock->ops->family != AF_CAN ||
+           job->can_sock->type != CAN_RAW) {
+               kfree(job);
+               return -EBADF;
+       }
+
        job->udp_dstcnt = dstcnt;
 
        err = cegw_thread_start(job);