]> www.infradead.org Git - users/hch/xfs.git/commit
ppp: reject claimed-as-LCP but actually malformed packets
authorDmitry Antipov <dmantipov@yandex.ru>
Mon, 8 Jul 2024 11:56:15 +0000 (14:56 +0300)
committerPaolo Abeni <pabeni@redhat.com>
Thu, 11 Jul 2024 09:00:08 +0000 (11:00 +0200)
commitf2aeb7306a898e1cbd03963d376f4b6656ca2b55
tree8d4f52f32b4bb74e867816069672048e5d6b1f9c
parent8c6790b5c25dfac11b589cc37346bcf9e23ad468
ppp: reject claimed-as-LCP but actually malformed packets

Since 'ppp_async_encode()' assumes valid LCP packets (with code
from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that
LCP packet has an actual body beyond PPP_LCP header bytes, and
reject claimed-as-LCP but actually malformed data otherwise.

Reported-by: syzbot+ec0723ba9605678b14bf@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=ec0723ba9605678b14bf
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
drivers/net/ppp/ppp_generic.c