diff options
| author | Loris Reiff <[email protected]> | 2021-01-22 16:42:32 +0000 |
|---|---|---|
| committer | Daniel Borkmann <[email protected]> | 2021-01-22 22:11:47 +0000 |
| commit | f4a2da755a7e1f5d845c52aee71336cee289935a (patch) | |
| tree | 5d8ffc8d9b3a7f18fc706b2aeffb6fa059b370d3 /net/lapb/lapb_out.c | |
| parent | bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (diff) | |
| download | kernel-f4a2da755a7e1f5d845c52aee71336cee289935a.tar.gz kernel-f4a2da755a7e1f5d845c52aee71336cee289935a.zip | |
bpf, cgroup: Fix problematic bounds check
Since ctx.optlen is signed, a larger value than max_value could be
passed, as it is later on used as unsigned, which causes a WARN_ON_ONCE
in the copy_to_user.
Fixes: 0d01da6afc54 ("bpf: implement getsockopt and setsockopt hooks")
Signed-off-by: Loris Reiff <[email protected]>
Signed-off-by: Daniel Borkmann <[email protected]>
Reviewed-by: Stanislav Fomichev <[email protected]>
Link: https://lore.kernel.org/bpf/[email protected]
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions