]> git.baikalelectronics.ru Git - kernel.git/commit
net/ieee802154: reject zero-sized raw_sendmsg()
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Sat, 1 Oct 2022 16:43:44 +0000 (01:43 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Oct 2022 11:22:26 +0000 (13:22 +0200)
commita5b7b3edf66ad105e14b269f61b551cd97c01bab
tree1a4f8ddbf750f08ddf80ec605eae673a29a0c497
parentf43fbc4d2ddad41e706cc969258384bb684a3482
net/ieee802154: reject zero-sized raw_sendmsg()

[ Upstream commit 1bbf24cf4a5e7654376f8d3706bf43933136e58b ]

syzbot is hitting skb_assert_len() warning at raw_sendmsg() for ieee802154
socket. What commit aaf386125a6d0c1b ("net/af_packet: check len when
min_header_len equals to 0") does also applies to ieee802154 socket.

Link: https://syzkaller.appspot.com/bug?extid=5ea725c25d06fb9114c4
Reported-by: syzbot <syzbot+5ea725c25d06fb9114c4@syzkaller.appspotmail.com>
Fixes: fe1f468a3ebcab50 ("bpf: Don't redirect packets with invalid pkt_len")
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ieee802154/socket.c