]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ipv6: Fix potential uninit-value access in __ip6_make_skb()
authorShigeru Yoshida <syoshida@redhat.com>
Mon, 6 May 2024 14:11:29 +0000 (23:11 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 May 2024 10:02:22 +0000 (12:02 +0200)
commit68c8ba16ab712eb709c6bab80ff151079d11d97a
tree5adcc96f24ae424e8e33a9785d796ceaf2a429ce
parent1ce60741d7e17dcf707e3bdebed4442ae30bdd02
ipv6: Fix potential uninit-value access in __ip6_make_skb()

[ Upstream commit 4e13d3a9c25b7080f8a619f961e943fe08c2672c ]

As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in
__ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags
instead of testing HDRINCL on the socket to avoid a race condition which
causes uninit-value access.

Fixes: ea30388baebc ("ipv6: Fix an uninit variable access bug in __ip6_make_skb()")
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv6/ip6_output.c