diff options
| author | Phillip Potter <phil@philpotter.co.uk> | 2021-05-02 23:34:42 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2021-05-03 22:33:54 +0200 |
| commit | 2e9f60932a2c19e8a11b4a69d419f107024b05a0 (patch) | |
| tree | c5fa8f27999183303b4c1394136a33388adb471c /net/ceph/pagevec.c | |
| parent | sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b (diff) | |
| download | linux-2e9f60932a2c19e8a11b4a69d419f107024b05a0.tar.xz linux-2e9f60932a2c19e8a11b4a69d419f107024b05a0.zip | |
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
Check at start of fill_frame_info that the MAC header in the supplied
skb is large enough to fit a struct hsr_ethhdr, as otherwise this is
not a valid HSR frame. If it is too small, return an error which will
then cause the callers to clean up the skb. Fixes a KMSAN-found
uninit-value bug reported by syzbot at:
https://syzkaller.appspot.com/bug?id=f7e9b601f1414f814f7602a82b6619a8d80bce3f
Reported-by: syzbot+e267bed19bfc5478fb33@syzkaller.appspotmail.com
Signed-off-by: Phillip Potter <phil@philpotter.co.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ceph/pagevec.c')
0 files changed, 0 insertions, 0 deletions