diff options
| author |   Guangguan Wang <guangguan.wang@linux.alibaba.com> | 2024-12-11 17:21:20 +0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2024-12-15 12:34:59 +0000 |
| commit | 9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad (patch) | |
| tree | 167b6df5cefbcfa41048ad2a79f4fdb919aa1b82 /scripts/generate_rust_analyzer.py | |
| parent | net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (diff) | |
| download | wireguard-linux-9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad.tar.xz wireguard-linux-9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad.zip | |
net/smc: check smcd_v2_ext_offset when receiving proposal msg
When receiving proposal msg in server, the field smcd_v2_ext_offset in
proposal msg is from the remote client and can not be fully trusted.
Once the value of smcd_v2_ext_offset exceed the max value, there has
the chance to access wrong address, and crash may happen.
This patch checks the value of smcd_v2_ext_offset before using it.
Fixes: 5c21c4ccafe8 ("net/smc: determine accepted ISM devices")
Signed-off-by: Guangguan Wang <guangguan.wang@linux.alibaba.com>
Reviewed-by: Wen Gu <guwen@linux.alibaba.com>
Reviewed-by: D. Wythe <alibuda@linux.alibaba.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions