diff options
| author |   Sven Eckelmann <sven@narfation.org> | 2026-05-02 19:08:37 +0200 |
|---|---|---|
| committer | Sven Eckelmann <sven@narfation.org> | 2026-05-12 08:33:52 +0200 |
| commit | 1e9fab756f8395096d5bba7be0c373c4c8f5d165 (patch) | |
| tree | 2dad6022b0a49ebe9df0602adfa246af161930ef /tools/testing/selftests/dm-verity/git:/ssh:/git@git.zx2c4.com | |
| parent | batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (diff) | |
batman-adv: tt: reject oversized local TVLV buffers
The commit 3a359bf5c61d ("batman-adv: reject oversized global TT response
buffers") added a check to ensure that a global return buffer size can be
stored in an u16. The same buffer handling also exists for the local data
buffer but was not touched.
A similar check should be also be in place for the local TVLV buffer. It
doesn't have the similar attack surface because it is only generated from
locally discovered MAC addresses but the dynamic nature could still cause
temporarily to large buffers.
Cc: stable@kernel.org
Fixes: 7ea7b4a14275 ("batman-adv: make the TT CRC logic VLAN specific")
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Diffstat (limited to 'tools/testing/selftests/dm-verity/git:/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions