Eric Dumazet
b98b0bc8c4
net: avoid signed overflows for SO_{SND|RCV}BUFFORCE ...
CAP_NET_ADMIN users should not be allowed to set negative
sk_sndbuf or sk_rcvbuf values, as it can lead to various memory
corruptions, crashes, OOM...
Note that before commit 82981930125a ("net: cleanups in
sock_setsockopt()"), the bug was even more serious, since SO_SNDBUF
and SO_RCVBUF were vulnerable.
This needs to be backported to all known linux kernels.
Again, many thanks to syzkaller team for discovering this gem.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-12-02 14:10:14 -05:00
2016-09-19 20:19:34 +02:00
2016-09-23 13:47:44 -04:00
2016-10-20 14:32:22 -04:00
2016-09-10 21:19:10 -07:00
2016-09-10 21:19:10 -07:00
2016-06-18 20:55:34 -07:00
2016-11-04 12:27:39 +01:00
2016-11-22 22:50:46 +01:00
2016-10-18 13:52:13 -04:00
2016-06-28 05:26:14 -04:00
2016-11-23 15:22:18 +01:00
2016-11-10 20:13:08 +01:00
2016-12-02 14:10:14 -05:00
2016-11-29 20:37:26 -05:00
2016-07-05 14:08:47 -07:00
2016-04-11 22:37:37 +01:00
2016-11-29 23:17:02 -05:00
2016-10-20 14:32:22 -04:00
2016-10-18 10:28:18 -04:00
2016-07-08 13:23:12 +02:00
2016-12-02 12:34:22 -05:00
2016-12-02 13:34:58 -05:00
2016-09-23 06:46:57 -04:00
2016-07-29 17:38:46 -07:00
2016-10-07 15:36:58 -07:00
2015-10-23 03:05:19 -07:00
2016-11-30 14:14:08 -05:00
2016-09-10 23:12:53 -07:00
2016-05-29 22:33:25 -07:00
2016-09-17 10:05:05 -04:00
2016-11-15 14:37:30 +01:00
2016-09-19 20:19:34 +02:00
2016-10-03 02:00:21 -04:00
2016-10-20 11:23:08 -04:00
2016-11-24 14:43:35 +01:00
2016-06-27 15:06:18 -04:00
2016-11-29 19:48:38 -05:00
2016-07-11 02:02:03 +02:00
2016-11-30 11:00:45 -05:00
2016-12-02 12:16:49 -05:00
2016-02-11 03:54:14 -05:00
2016-05-17 14:11:19 -04:00
2016-12-02 13:29:26 -05:00
2016-04-05 10:48:53 +02:00
2016-07-13 11:53:40 -07:00
2016-10-13 08:43:17 +01:00
2016-11-29 20:44:38 -05:00
2016-11-14 16:22:33 -05:00
2016-10-12 01:51:49 -04:00
2016-11-18 16:32:21 -08:00
2016-10-19 10:58:04 -04:00
2016-12-02 14:03:20 -05:00
2016-11-18 13:58:39 -05:00
2016-09-27 07:59:25 -04:00
2016-11-18 08:44:44 +01:00
2016-09-09 18:13:30 -07:00
2016-11-30 10:58:53 +01:00
2016-06-09 23:41:03 -07:00
2016-08-17 19:36:23 -04:00
2016-08-17 19:36:23 -04:00
2016-11-17 00:00:23 -05:00
2016-10-06 09:52:23 -07:00
b98b0bc8c4