Paolo Abeni 39884604b1 mptcp: fix NULL ptr dereference in MP_JOIN error path ...

When token lookup on MP_JOIN 3rd ack fails, the server
socket closes with a reset the incoming child. Such socket
has the 'is_mptcp' flag set, but no msk socket associated
- due to the failed lookup.

While crafting the reset packet mptcp_established_options_mp()
will try to dereference the child's master socket, causing
a NULL ptr dereference.

This change addresses the issue with explicit fallback to
TCP in such error path.

Fixes: 729cd6436f35 ("mptcp: cope better with MP_JOIN failure")
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2020-05-30 21:54:03 -07:00

..

crypto.c

mptcp: use untruncated hash in ADD_ADDR HMAC

2020-05-22 14:21:24 -07:00

ctrl.c

mptcp: new sysctl to control the activation per NS

2020-01-24 13:44:08 +01:00

diag.c

mptcp: allow dumping subflow context to userspace

2020-03-29 22:14:48 -07:00

Kconfig

mptcp: select CRYPTO

2020-02-16 19:37:16 -08:00

Makefile

mptcp: add netlink-based PM

2020-03-29 22:14:49 -07:00

mib.c

mptcp: add and use MIB counter infrastructure

2020-03-29 22:14:49 -07:00

mib.h

mptcp: add and use MIB counter infrastructure

2020-03-29 22:14:49 -07:00

options.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2020-05-24 13:47:27 -07:00

pm_netlink.c

mptcp/pm_netlink.c : add check for nla_put_in/6_addr

2020-04-23 15:38:10 -07:00

pm.c

mptcp: add some missing pr_fmt defines

2020-04-03 16:06:32 -07:00

protocol.c

mptcp: attempt coalescing when moving skbs to mptcp rx queue

2020-05-26 20:29:32 -07:00

protocol.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2020-05-24 13:47:27 -07:00

subflow.c

mptcp: fix NULL ptr dereference in MP_JOIN error path

2020-05-30 21:54:03 -07:00

token.c

mptcp: fix "fn parameter not described" warnings

2020-04-02 06:59:21 -07:00