]> git.baikalelectronics.ru Git - kernel.git/commit
tipc: Fix namespace violation in tipc_sk_fill_sock_diag
authorGhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com>
Wed, 4 Apr 2018 12:49:47 +0000 (14:49 +0200)
committerDavid S. Miller <davem@davemloft.net>
Wed, 4 Apr 2018 15:54:35 +0000 (11:54 -0400)
commite03f7b83eed30f9d4507d19612ae98dcf5cec621
treefd1b4ff1a0f5717a7b521812e871ed4537b157de
parentacabfd7496a0a4a9c890657b9efd77063bc2ccb3
tipc: Fix namespace violation in tipc_sk_fill_sock_diag

To fetch UID info for socket diagnostics, we determine the
namespace of user context using tipc socket instance. This
may cause namespace violation, as the kernel will remap based
on UID.

We fix this by fetching namespace info using the calling userspace
netlink socket.

Fixes: 1e80302a1852 (tipc: implement socket diagnostics for AF_TIPC)
Reported-by: syzbot+326e587eff1074657718@syzkaller.appspotmail.com
Acked-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: GhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/socket.c