]> git.baikalelectronics.ru Git - kernel.git/commit
Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
authorPiotr Sawicki <p.sawicki2@partner.samsung.com>
Thu, 19 Jul 2018 09:42:58 +0000 (11:42 +0200)
committerCasey Schaufler <casey@schaufler-ca.com>
Mon, 23 Jul 2018 19:59:41 +0000 (12:59 -0700)
commit99e7bde7c6e35fdfe7ec541e865beebdb147ee46
tree181e423635ece00b2d29023cc17465f793700b43
parent8655a46b96d38f9431931d63d85ba5d604ddea0a
Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets

A socket which has sk_family set to PF_INET6 is able to receive not
only IPv6 but also IPv4 traffic (IPv4-mapped IPv6 addresses).

Prior to this patch, the smk_skb_to_addr_ipv6() could have been
called for socket buffers containing IPv4 packets, in result such
traffic was allowed.

Signed-off-by: Piotr Sawicki <p.sawicki2@partner.samsung.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smack_lsm.c