Alexander Potapenko fd2c83b357 net/packet: check length in getsockopt() called with PACKET_HDRLEN ...

In the case getsockopt() is called with PACKET_HDRLEN and optlen < 4
|val| remains uninitialized and the syscall may behave differently
depending on its value, and even copy garbage to userspace on certain
architectures. To fix this we now return -EINVAL if optlen is too small.

This bug has been detected with KMSAN.

Signed-off-by: Alexander Potapenko <glider@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-04-25 14:05:52 -04:00

..

af_packet.c

net/packet: check length in getsockopt() called with PACKET_HDRLEN

2017-04-25 14:05:52 -04:00

diag.c

packet: pdiag_put_ring() should return TX_RING info for TPACKET_V3

2017-01-10 21:02:42 -05:00

internal.h

packet: add classic BPF fanout mode

2015-08-17 14:22:47 -07:00

Kconfig

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00

Makefile

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00