]> git.baikalelectronics.ru Git - kernel.git/commit
tls: Stricter error checking in zerocopy sendmsg path
authorDave Watson <davejwatson@fb.com>
Thu, 12 Jul 2018 15:03:43 +0000 (08:03 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 16 Jul 2018 20:31:31 +0000 (13:31 -0700)
commit0e9cc7d85d8f737038be4c9a8ecefa0d0c37499c
tree5a46f10804c8bcc68822d9100a1bc951218d8775
parent8e4739820cd228df0b349945896160a86c298b0a
tls: Stricter error checking in zerocopy sendmsg path

In the zerocopy sendmsg() path, there are error checks to revert
the zerocopy if we get any error code.  syzkaller has discovered
that tls_push_record can return -ECONNRESET, which is fatal, and
happens after the point at which it is safe to revert the iter,
as we've already passed the memory to do_tcp_sendpages.

Previously this code could return -ENOMEM and we would want to
revert the iter, but AFAIK this no longer returns ENOMEM after
30c891e0a8e ("tls: fix waitall behavior in tls_sw_recvmsg"),
so we fail for all error codes.

Reported-by: syzbot+c226690f7b3126c5ee04@syzkaller.appspotmail.com
Reported-by: syzbot+709f2810a6a05f11d4d3@syzkaller.appspotmail.com
Signed-off-by: Dave Watson <davejwatson@fb.com>
Fixes: c2c217d10788 ("tls: kernel TLS support")
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tls/tls_sw.c