--- net/ipv4/netfilter/ipt_CLUSTERIP.c

+++ net/ipv4/netfilter/ipt_CLUSTERIP.c

@@ -666,8 +666,11 @@ static ssize_t clusterip_proc_write(stru

struct clusterip_config *c = pde->data;

unsigned long nodenum;

- if (copy_from_user(buffer, input, PROC_WRITELEN))

+ if (size > PROC_WRITELEN)

+ return -EIO;

+ if (copy_from_user(buffer, input, size))

return -EFAULT;

+ buffer[size] = 0;

if (*buffer == '+') {

nodenum = simple_strtoul(buffer+1, NULL, 10);