]> www.infradead.org Git - users/jedix/linux-maple.git/commit
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
authorGavrilov Ilia <Ilia.Gavrilov@infotecs.ru>
Wed, 12 Feb 2025 08:21:25 +0000 (08:21 +0000)
committerJohannes Berg <johannes.berg@intel.com>
Wed, 26 Feb 2025 14:45:43 +0000 (15:45 +0100)
commitd00c0c4105e5ab8a6a13ed23d701cceb285761fa
tree2013999b4cfac79a244df66970afd045633becde
parentebf9944bed4ef69d29371cd3b7276f858c513954
wifi: mac80211: fix integer overflow in hwmp_route_info_get()

Since the new_metric and last_hop_metric variables can reach
the MAX_METRIC(0xffffffff) value, an integer overflow may occur
when multiplying them by 10/9. It can lead to incorrect behavior.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

Fixes: a8d418d9ac25 ("mac80211: mesh: only switch path when new metric is at least 10% better")
Cc: stable@vger.kernel.org
Signed-off-by: Ilia Gavrilov <Ilia.Gavrilov@infotecs.ru>
Link: https://patch.msgid.link/20250212082124.4078236-1-Ilia.Gavrilov@infotecs.ru
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/mesh_hwmp.c