diff options
| author | Ido Schimmel <[email protected]> | 2025-06-04 11:32:52 +0000 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2025-06-05 15:03:17 +0000 |
| commit | 7632fedb266d93ed0ed9f487133e6c6314a9b2d1 (patch) | |
| tree | 99e2baa92bb667cf9d0f8d78ebb3517376564135 /scripts/git-resolve.sh | |
| parent | net: prevent a NULL deref in rtnl_create_link() (diff) | |
| download | kernel-7632fedb266d93ed0ed9f487133e6c6314a9b2d1.tar.gz kernel-7632fedb266d93ed0ed9f487133e6c6314a9b2d1.zip | |
seg6: Fix validation of nexthop addresses
The kernel currently validates that the length of the provided nexthop
address does not exceed the specified length. This can lead to the
kernel reading uninitialized memory if user space provided a shorter
length than the specified one.
Fix by validating that the provided length exactly matches the specified
one.
Fixes: d1df6fd8a1d2 ("ipv6: sr: define core operations for seg6local lightweight tunnel")
Reviewed-by: Petr Machata <[email protected]>
Signed-off-by: Ido Schimmel <[email protected]>
Reviewed-by: David Ahern <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'scripts/git-resolve.sh')
0 files changed, 0 insertions, 0 deletions