]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8427020) | patch
ppp: fix out-of-bounds access in bpf_prog_create()
authorEric Biggers <ebiggers@google.com>
Thu, 5 Dec 2019 05:54:19 +0000 (21:54 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 5 Dec 2019 22:45:19 +0000 (14:45 -0800)
commit3bcedf84d9b783ae5d2d44edc287da4b14d5acf3
tree299f3f47c09c1e21245194204662b96bb73ef6a1tree | snapshot
parent84270206d505011d09a2103a60c5f64e016da84dcommit | diff
ppp: fix out-of-bounds access in bpf_prog_create()

sock_fprog_kern::len is in units of struct sock_filter, not bytes.

Fixes: fcbc39646a03 ("compat_ioctl: unify copy-in of ppp filters")
Reported-by: syzbot+eb853b51b10f1befa0b7@syzkaller.appspotmail.com
Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ppp/ppp_generic.c diff | blob | history
Linux Kernel Source Tree.