]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
tuntap: add sanity checks about msg_controllen in sendmsg
authorHarold Huang <baymaxhuang@gmail.com>
Thu, 3 Mar 2022 02:24:40 +0000 (10:24 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 13 Apr 2022 19:00:59 +0000 (21:00 +0200)
commit647b35aaf454271d68067d4bf05154095fe63f93
tree593ffd0a987ce224db12de81d09e622c315a0a3d
parent797b4ea9515eb01ec9b79f9319abc5ac4fc7087d
tuntap: add sanity checks about msg_controllen in sendmsg

[ Upstream commit 74a335a07a17d131b9263bfdbdcb5e40673ca9ca ]

In patch [1], tun_msg_ctl was added to allow pass batched xdp buffers to
tun_sendmsg. Although we donot use msg_controllen in this path, we should
check msg_controllen to make sure the caller pass a valid msg_ctl.

[1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fe8dd45bb7556246c6b76277b1ba4296c91c2505

Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Suggested-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Harold Huang <baymaxhuang@gmail.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20220303022441.383865-1-baymaxhuang@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/tap.c
drivers/net/tun.c
drivers/vhost/net.c