]> git.baikalelectronics.ru Git - kernel.git/commit
tipc: Fix namespace violation in tipc_sk_fill_sock_diag
authorGhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com>
Wed, 4 Apr 2018 12:49:47 +0000 (14:49 +0200)
committerDavid S. Miller <davem@davemloft.net>
Wed, 4 Apr 2018 15:54:35 +0000 (11:54 -0400)
commita9c7d39c5ebd8ab241fd87520a4f20bf71eb7b74
treefd1b4ff1a0f5717a7b521812e871ed4537b157de
parentdfe86c6aeb6a7ea80068ffbcf59026394eb0e3ae
tipc: Fix namespace violation in tipc_sk_fill_sock_diag

To fetch UID info for socket diagnostics, we determine the
namespace of user context using tipc socket instance. This
may cause namespace violation, as the kernel will remap based
on UID.

We fix this by fetching namespace info using the calling userspace
netlink socket.

Fixes: e9a4ef2a0a6e (tipc: implement socket diagnostics for AF_TIPC)
Reported-by: syzbot+326e587eff1074657718@syzkaller.appspotmail.com
Acked-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: GhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/socket.c