]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
rtnetlink: use nla_nest_end_safe() in rtnl_fill_prop_list()
authorEric Dumazet <edumazet@google.com>
Mon, 25 May 2026 08:35:38 +0000 (08:35 +0000)
committerJakub Kicinski <kuba@kernel.org>
Wed, 27 May 2026 02:20:15 +0000 (19:20 -0700)
commit73a7c8fb2302ae78920b210c098b752b9caa6bf6
treeea53efff95ba894f61afe61092b7538c0d4bba5e
parent2bcf59eefb9f00a2b1d426b639ee49c305a80695
rtnetlink: use nla_nest_end_safe() in rtnl_fill_prop_list()

Avoid corrupting a netlink message and confuse user space in the
very unlikely case rtnl_fill_prop_list was able to produce a very big
nested element.

This is extremely unlikely, because rtnl_prop_list_size()
provisions nla_total_size(ALTIFNAMSIZ) per altname.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260525083542.1565964-2-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/core/rtnetlink.c