]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2f9ae19) | patch
net/flow_dissector: correctly cap nhoff and thoff in case of BPF
authorStanislav Fomichev <sdf@google.com>
Thu, 6 Dec 2018 04:40:48 +0000 (20:40 -0800)
committerAlexei Starovoitov <ast@kernel.org>
Fri, 7 Dec 2018 21:38:29 +0000 (13:38 -0800)
commit64f4bd0f1cbc9dde448b877598b313b0922f227b
treeb4943b459ce0aa731a75f27543b536fc8ba070bdtree | snapshot
parent2f9ae192ba59c155ee34b29b3d185c3a3272f73dcommit | diff
net/flow_dissector: correctly cap nhoff and thoff in case of BPF

We want to make sure that the following condition holds:
0 <= nhoff <= thoff <= skb->len

BPF program can set out-of-bounds nhoff and thoff, which is dangerous, see
recent commit 3055234159f2 ("flow_dissector: properly cap thoff field")'.

Signed-off-by: Stanislav Fomichev <sdf@google.com>
Acked-by: Song Liu <songliubraving@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
net/core/flow_dissector.c diff | blob | history
Linux Kernel Source Tree.