]> git.baikalelectronics.ru Git - kernel.git/commit
net/ieee802154: fix uninit value bug in dgram_sendmsg
authorHaimin Zhang <tcs.kernel@gmail.com>
Thu, 8 Sep 2022 12:19:27 +0000 (20:19 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 15 Oct 2022 05:54:37 +0000 (07:54 +0200)
commitf01aaa85fe5c6e89a8462faffd61ae22bb9cc2d0
tree0e1038806420162f51eabfaa9564fe6d40f93185
parent6b851a78aff75f2d5424f97349d9950bf5759717
net/ieee802154: fix uninit value bug in dgram_sendmsg

[ Upstream commit 3b8d22d8a4dcb128e6cb4886c302b12ce258db01 ]

There is uninit value bug in dgram_sendmsg function in
net/ieee802154/socket.c when the length of valid data pointed by the
msg->msg_name isn't verified.

We introducing a helper function ieee802154_sockaddr_check_size to
check namelen. First we check there is addr_type in ieee802154_addr_sa.
Then, we check namelen according to addr_type.

Also fixed in raw_bind, dgram_bind, dgram_connect.

Signed-off-by: Haimin Zhang <tcs_kernel@tencent.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/net/ieee802154_netdev.h
net/ieee802154/socket.c