Messages in this thread | | | Date | Wed, 24 May 2017 15:32:24 -0400 (EDT) | Subject | Re: [PATCH] net: rtnetlink: bail out from rtnl_fdb_dump() on parse error | From | David Miller <> |
| |
From: Alexander Potapenko <glider@google.com> Date: Tue, 23 May 2017 13:20:28 +0200
> rtnl_fdb_dump() failed to check the result of nlmsg_parse(), which led > to contents of |ifm| being uninitialized because nlh->nlmsglen was too > small to accommodate |ifm|. The uninitialized data may affect some > branches and result in unwanted effects, although kernel data doesn't > seem to leak to the userspace directly. > > The bug has been detected with KMSAN and syzkaller. > > Signed-off-by: Alexander Potapenko <glider@google.com>
Applied, thanks.
| |