Kernel/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-01-18 02:46:06 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
linux/net
History
Anant Thazhemadam 9aa9379d8f can: af_can: prevent potential access of uninitialized member in canfd_rcv() 
In canfd_rcv(), cfd->len is uninitialized when skb->len = 0, and this
uninitialized cfd->len is accessed nonetheless by pr_warn_once().

Fix this uninitialized variable access by checking cfd->len's validity
condition (cfd->len > CANFD_MAX_DLEN) separately after the skb->len's
condition is checked, and appropriately modify the log messages that
are generated as well.
In case either of the required conditions fail, the skb is freed and
NET_RX_DROP is returned, same as before.

Fixes: d4689846881d ("can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once")
Reported-by: syzbot+9bcb0c9409066696d3aa@syzkaller.appspotmail.com
Tested-by: Anant Thazhemadam <anant.thazhemadam@gmail.com>
Signed-off-by: Anant Thazhemadam <anant.thazhemadam@gmail.com>
Link: https://lore.kernel.org/r/20201103213906.24219-3-anant.thazhemadam@gmail.com
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
2020-11-15 18:24:33 +01:00
..
6lowpan
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
9p
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
2020-10-12 10:05:47 +02:00
802
net: 802: psnap.c: Use built-in RCU list checking
2020-02-24 13:02:53 -08:00
8021q
net: vlan: Fixed signedness in vlan_group_prealloc_vid()
2020-09-28 00:51:39 -07:00
appletalk
appletalk: Fix atalk_proc_init() return path
2020-08-03 15:48:32 -07:00
atm
net: atm: fix update of position index in lec_seq_next
2020-10-31 12:26:30 -07:00
ax25
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-07-25 17:49:04 -07:00
batman-adv
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
bluetooth
Bluetooth: Replace zero-length array with flexible-array member
2020-10-29 17:22:59 -05:00
bpf
bpf: fix raw_tp test run in preempt kernel
2020-09-30 08:34:08 -07:00
bpfilter
Revert "bpfilter: Fix build error with CONFIG_BPFILTER_UMH"
2020-10-15 12:33:24 -07:00
bridge
netfilter: ebtables: Fixes dropping of small packets in bridge nat
2020-10-20 13:54:53 +02:00
caif
caif: Remove duplicate macro SRVL_CTRL_PKT_SIZE
2020-09-05 15:57:05 -07:00
can
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
2020-11-15 18:24:33 +01:00
ceph
libceph: clear con->out_msg on Policy::stateful_server faults
2020-10-12 15:29:27 +02:00
core
net: Exempt multicast addresses from five-second neighbor lifetime
2020-11-13 14:24:39 -08:00
dcb
net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
2020-09-10 15:09:08 -07:00
dccp
inet: remove icsk_ack.blocked
2020-09-30 14:21:30 -07:00
decnet
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
dns_resolver
docs: networking: convert dns_resolver.txt to ReST
2020-04-28 14:39:46 -07:00
dsa
net: dsa: tag_ksz: KSZ8795 and KSZ9477 also use tail tags
2020-10-19 17:32:50 -07:00
ethernet
net: move devres helpers into a separate source file
2020-05-23 16:56:17 -07:00
ethtool
ethtool: netlink: add missing netdev_features_change() call
2020-11-09 17:15:34 -08:00
hsr
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
ieee802154
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
ife
…
ipv4
net: Exempt multicast addresses from five-second neighbor lifetime
2020-11-13 14:24:39 -08:00
ipv6
ipv6: Fix error path to cancel the meseage
2020-11-13 18:20:00 -08:00
iucv
net/af_iucv: fix null pointer dereference on shutdown
2020-11-10 18:08:17 -08:00
kcm
net: pass a sockptr_t into ->setsockopt
2020-07-24 15:41:54 -07:00
key
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-08-02 01:02:12 -07:00
l2tp
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
l3mdev
net: Fix some comments
2020-08-27 07:55:59 -07:00
lapb
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
llc
net: pass a sockptr_t into ->setsockopt
2020-07-24 15:41:54 -07:00
mac80211
mac80211: free sta in sta_info_insert_finish() on errors
2020-11-13 09:48:32 +01:00
mac802154
Merge tag 'ieee802154-for-davem-2020-09-08' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan
2020-09-08 20:12:58 -07:00
mpls
mpls: load mpls_gso after mpls_iptunnel
2020-10-20 21:16:45 -07:00
mptcp
mptcp: provide rmem[0] limit
2020-11-09 17:34:34 -08:00
ncsi
net/ncsi: Fix netlink registration
2020-11-12 17:00:13 -08:00
netfilter
netfilter: ipset: Update byte and packet counters regardless of whether they match
2020-10-31 11:11:11 +01:00
netlabel
netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
2020-11-10 15:31:46 -08:00
netlink
netlink: export policy in extended ACK
2020-10-09 20:22:32 -07:00
netrom
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
nfc
nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
2020-10-20 17:06:22 -07:00
nsh
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
openvswitch
net: openvswitch: silence suspicious RCU usage warning
2020-11-03 16:57:42 -08:00
packet
net/packet: Fix a comment about network_header
2020-09-19 16:40:48 -07:00
phonet
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
psample
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
qrtr
net: qrtr: ns: Fix the incorrect usage of rcu_read_lock()
2020-10-06 06:01:35 -07:00
rds
RDMA: Add rdma_connect_locked()
2020-10-28 09:14:49 -03:00
rfkill
rfkill: Fix use-after-free in rfkill_resume()
2020-11-12 09:18:06 +01:00
rose
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
rxrpc
rxrpc: Fix loss of final ack on shutdown
2020-10-15 13:28:00 +01:00
sched
netem: fix zero division in tabledist
2020-10-29 11:45:47 -07:00
sctp
sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
2020-11-02 15:03:25 -08:00
smc
flexible-array member conversion patches for 5.10-rc2
2020-10-31 14:31:28 -07:00
strparser
…
sunrpc
net/sunrpc: fix useless comparison in proc_do_xprt()
2020-11-08 16:28:25 -05:00
switchdev
net: switchdev: Fixed kerneldoc warning
2020-09-23 17:46:31 -07:00
tipc
tipc: fix memory leak in tipc_topsrv_start()
2020-11-11 14:39:23 -08:00
tls
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-10-15 12:43:21 -07:00
unix
networking changes for the 5.10 merge window
2020-10-15 18:42:13 -07:00
vmw_vsock
vsock: use ns_capable_noaudit() on socket create
2020-10-26 16:22:42 -07:00
wimax
genetlink: move to smaller ops wherever possible
2020-10-02 19:11:11 -07:00
wireless
cfg80211: regulatory: Fix inconsistent format argument
2020-10-30 10:06:56 +01:00
x25
net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request
2020-11-12 18:01:40 -08:00
xdp
xsk: Fix possible memory leak at socket close
2020-10-29 15:19:56 +01:00
xfrm
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2020-11-04 08:12:52 -08:00
compat.c
iov_iter: transparently handle compat iovecs in import_iovec
2020-10-03 00:02:13 -04:00
devres.c
net: devres: rename the release callback of devm_register_netdev()
2020-06-30 15:57:34 -07:00
Kconfig
drop_monitor: Convert to using devlink tracepoint
2020-09-30 18:01:26 -07:00
Makefile
net: move devres helpers into a separate source file
2020-05-23 16:56:17 -07:00
socket.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-10-05 18:40:01 -07:00
sysctl_net.c
…