Messages in this thread | | | Subject | Re: [PATCH] af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers | From | Julian Wiedmann <> | Date | Wed, 14 Jun 2017 16:49:06 +0200 |
| |
On 06/13/2017 07:42 PM, Mateusz Jurczyk wrote: > Verify that the caller-provided sockaddr structure is large enough to > contain the sa_family field, before accessing it in bind() and connect() > handlers of the AF_IUCV socket. Since neither syscall enforces a minimum > size of the corresponding memory region, very short sockaddrs (zero or > one byte long) result in operating on uninitialized memory while > referencing .sa_family. > > Signed-off-by: Mateusz Jurczyk <mjurczyk@google.com> Thanks Mateusz!
Fixes: 52a82e23b9f2 Acked-by: Julian Wiedmann <jwi@linux.vnet.ibm.com>
| |