]> www.infradead.org Git - users/dwmw2/linux.git/commit
packet: validate msg_namelen in send directly
authorWillem de Bruijn <willemb@google.com>
Mon, 29 Apr 2019 15:53:18 +0000 (11:53 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 8 May 2019 05:19:05 +0000 (07:19 +0200)
commit71061f1a8f1630240c5b0b0d5b39ce708e7eb5ff
tree03e90c8875d382db314d1efb3f67afd6e65c0a92
parent493cbb3e9e83afef3418dcef3b6f951d2888f300
packet: validate msg_namelen in send directly

[ Upstream commit 486efdc8f6ce802b27e15921d2353cc740c55451 ]

Packet sockets in datagram mode take a destination address. Verify its
length before passing to dev_hard_header.

Prior to 2.6.14-rc3, the send code ignored sll_halen. This is
established behavior. Directly compare msg_namelen to dev->addr_len.

Change v1->v2: initialize addr in all paths

Fixes: 6b8d95f1795c4 ("packet: validate address length if non-zero")
Suggested-by: David Laight <David.Laight@aculab.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/packet/af_packet.c