diff options
| author |   Jakub Kicinski <kuba@kernel.org> | 2026-04-16 19:34:26 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-04-16 19:34:26 -0700 |
| commit | 946e99146597558c7447ac4d1e598fcb1695489b (patch) | |
| tree | 9eb155b2aefa533ea3b48473352c86f6aeba3c20 /samples/kobject/ssh:/git@git.zx2c4.com/git: | |
| parent | Merge branch 'net-enetc-fix-command-bd-ring-issues' (diff) | |
| parent | vsock/test: add MSG_PEEK after partial recv test (diff) | |
Merge branch 'vsock-virtio-fix-msg_peek-calculation-on-bytes-to-copy'
Luigi Leonardi says:
====================
vsock/virtio: fix MSG_PEEK calculation on bytes to copy
`virtio_transport_stream_do_peek`, when calculating the number of bytes to
copy, didn't consider the `offset`, caused by partial reads that happened
before.
This might cause out-of-bounds read that lead to an EFAULT.
More details in the commits.
Commit 1 introduces the fix
Commit 2 introduces some preliminary work for adding a test and fixes a
problem in existing tests.
Commit 3 introduces a test that checks for this bug to avoid future
regressions.
For disclosure: this bug was found initially by claude opus 4.6, I then analyzed
it and worked on the fix and the test.
====================
Link: https://patch.msgid.link/20260415-fix_peek-v4-0-8207e872759e@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'samples/kobject/ssh:/git@git.zx2c4.com/git:')
0 files changed, 0 insertions, 0 deletions