]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d1d628f) | patch
ppp: fix out-of-bounds access in bpf_prog_create()
authorEric Biggers <ebiggers@google.com>
Thu, 5 Dec 2019 05:54:19 +0000 (21:54 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 5 Dec 2019 22:45:19 +0000 (14:45 -0800)
commit45cc7c3975ef503dcdd6f5db89d1a7561ea0a02a
tree299f3f47c09c1e21245194204662b96bb73ef6a1tree | snapshot
parentd1d628fc131bf98f742f08c6048a7553f8862f0fcommit | diff
ppp: fix out-of-bounds access in bpf_prog_create()

sock_fprog_kern::len is in units of struct sock_filter, not bytes.

Fixes: 7a1cb176de85 ("compat_ioctl: unify copy-in of ppp filters")
Reported-by: syzbot+eb853b51b10f1befa0b7@syzkaller.appspotmail.com
Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ppp/ppp_generic.c diff | blob | history
Linux Kernel Source Tree.