Messages in this thread | | | Date | Tue, 23 May 2023 15:26:30 +0200 | From | Jiri Pirko <> | Subject | Re: [PATCH net] ipv6: Fix out-of-bounds access in ipv6_find_tlv() |
| |
Tue, May 23, 2023 at 10:29:44AM CEST, Ilia.Gavrilov@infotecs.ru wrote: >optlen is fetched without checking whether there is more than one byte to parse. >It can lead to out-of-bounds access. > >Found by InfoTeCS on behalf of Linux Verification Center >(linuxtesting.org) with SVACE. > >Fixes: 3c73a0368e99 ("ipv6: Update ipv6 static library with newly needed functions") >Signed-off-by: Gavrilov Ilia <Ilia.Gavrilov@infotecs.ru>
Reviewed-by: Jiri Pirko <jiri@nvidia.com>
| |