diff options
| author |   Guangguan Wang <guangguan.wang@linux.alibaba.com> | 2024-12-11 17:21:18 +0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2024-12-15 12:34:59 +0000 |
| commit | a29e220d3c8edbf0e1beb0f028878a4a85966556 (patch) | |
| tree | 5d1b570d59ccae980735c241be052e4dc7100510 /scripts/generate_rust_analyzer.py | |
| parent | net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (diff) | |
| download | wireguard-linux-a29e220d3c8edbf0e1beb0f028878a4a85966556.tar.xz wireguard-linux-a29e220d3c8edbf0e1beb0f028878a4a85966556.zip | |
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
When receiving proposal msg in server, the field iparea_offset
and the field ipv6_prefixes_cnt in proposal msg are from the
remote client and can not be fully trusted. Especially the
field iparea_offset, once exceed the max value, there has the
chance to access wrong address, and crash may happen.
This patch checks iparea_offset and ipv6_prefixes_cnt before using them.
Fixes: e7b7a64a8493 ("smc: support variable CLC proposal messages")
Signed-off-by: Guangguan Wang <guangguan.wang@linux.alibaba.com>
Reviewed-by: Wen Gu <guwen@linux.alibaba.com>
Reviewed-by: D. Wythe <alibuda@linux.alibaba.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions