lkml.org 
[lkml]   [2021]   [Aug]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v2] net: 6pack: fix slab-out-of-bounds in decode_data
    From
    Date
    Hello:

    This patch was applied to netdev/net.git (refs/heads/master):

    On Fri, 13 Aug 2021 18:14:33 +0300 you wrote:
    > Syzbot reported slab-out-of bounds write in decode_data().
    > The problem was in missing validation checks.
    >
    > Syzbot's reproducer generated malicious input, which caused
    > decode_data() to be called a lot in sixpack_decode(). Since
    > rx_count_cooked is only 400 bytes and noone reported before,
    > that 400 bytes is not enough, let's just check if input is malicious
    > and complain about buffer overrun.
    >
    > [...]

    Here is the summary with links:
    - [v2] net: 6pack: fix slab-out-of-bounds in decode_data
    https://git.kernel.org/netdev/net/c/19d1532a1876

    You are awesome, thank you!
    --
    Deet-doot-dot, I am a bot.
    https://korg.docs.kernel.org/patchwork/pwbot.html


    \
     
     \ /
      Last update: 2021-08-16 12:11    [W:2.864 / U:0.188 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site