diff options
| author |   Eric Dumazet <edumazet@google.com> | 2018-03-14 09:04:16 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2018-03-14 12:53:23 -0400 |
| commit | 4dcb31d4649df36297296b819437709f5407059c (patch) | |
| tree | c3f83c7300f9f8fe9612bf790efbfe150345ae88 /net/ipv4/xfrm4_policy.c | |
| parent | qed: Use after free in qed_rdma_free() (diff) | |
| download | linux-dev-4dcb31d4649df36297296b819437709f5407059c.tar.xz linux-dev-4dcb31d4649df36297296b819437709f5407059c.zip | |
net: use skb_to_full_sk() in skb_update_prio()
Andrei Vagin reported a KASAN: slab-out-of-bounds error in
skb_update_prio()
Since SYNACK might be attached to a request socket, we need to
get back to the listener socket.
Since this listener is manipulated without locks, add const
qualifiers to sock_cgroup_prioidx() so that the const can also
be used in skb_update_prio()
Also add the const qualifier to sock_cgroup_classid() for consistency.
Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead of listener")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Andrei Vagin <avagin@virtuozzo.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/xfrm4_policy.c')
0 files changed, 0 insertions, 0 deletions