Xin Long 7b7e51ff35 tipc: check link name with right length in tipc_nl_compat_link_set ...

commit 8c63bf9ab4 upstream.

A similar issue as fixed by Patch "tipc: check bearer name with right
length in tipc_nl_compat_bearer_enable" was also found by syzbot in
tipc_nl_compat_link_set().

The length to check with should be 'TLV_GET_DATA_LEN(msg->req) -
offsetof(struct tipc_link_config, name)'.

Reported-by: syzbot+de00a87b8644a582ae79@syzkaller.appspotmail.com
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-05-02 09:32:04 +02:00

..

addr.c

tipc: simplify include dependencies

2015-05-14 12:24:45 -04:00

addr.h

tipc: introduce constants for tipc address validation

2016-07-26 14:26:42 -07:00

bcast.c

tipc: fix broadcast link synchronization problem

2016-10-29 17:21:09 -04:00

bcast.h

tipc: fix broadcast link synchronization problem

2016-10-29 17:21:09 -04:00

bearer.c

tipc: error path leak fixes in tipc_enable_bearer()

2018-03-03 10:23:24 +01:00

bearer.h

tipc: check minimum bearer MTU

2016-12-02 14:03:20 -05:00

core.c

tipc: add neighbor monitoring framework

2016-06-15 14:06:28 -07:00

core.h

tipc: add neighbor monitoring framework

2016-06-15 14:06:28 -07:00

discover.c

tipc: allocate user memory with GFP_KERNEL flag

2017-07-05 14:40:27 +02:00

discover.h

tipc: eliminate buffer leak in bearer layer

2016-04-07 17:00:13 -04:00

eth_media.c

tipc: make media address offset a common define

2015-02-27 18:18:48 -05:00

ib_media.c

tipc: rename media/msg related definitions

2015-02-27 18:18:48 -05:00

Kconfig

tipc: add ip/udp media type

2015-03-05 22:08:42 -05:00

link.c

tipc: allocate user memory with GFP_KERNEL flag

2017-07-05 14:40:27 +02:00

link.h

tipc: transfer broadcast nacks in link state messages

2016-09-02 17:10:24 -07:00

Makefile

tipc: add neighbor monitoring framework

2016-06-15 14:06:28 -07:00

monitor.c

tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path

2018-03-03 10:23:24 +01:00

monitor.h

tipc: dump monitor attributes

2016-07-26 14:26:42 -07:00

msg.c

tipc: use only positive error codes in messages

2017-10-12 11:51:23 +02:00

msg.h

tipc: allocate user memory with GFP_KERNEL flag

2017-07-05 14:40:27 +02:00

name_distr.c

tipc: allocate user memory with GFP_KERNEL flag

2017-07-05 14:40:27 +02:00

name_distr.h

tipc: reduce code dependency between binding table and node layer

2015-11-20 14:06:10 -05:00

name_table.c

tipc: move netlink policies to netlink.c

2016-03-07 14:56:41 -05:00

name_table.h

tipc: convert legacy nl name table dump to nl compat

2015-02-09 13:20:48 -08:00

net.c

tipc: Fix tipc_sk_reinit race conditions

2017-06-17 06:41:49 +02:00

net.h

tipc: add peer removal functionality

2016-08-18 23:36:07 -07:00

netlink_compat.c

tipc: check link name with right length in tipc_nl_compat_link_set

2019-05-02 09:32:04 +02:00

netlink.c

tipc: add policy for TIPC_NLA_NET_ADDR

2018-04-29 11:32:01 +02:00

netlink.h

tipc: make cluster size threshold for monitoring configurable

2016-07-26 14:26:42 -07:00

node.c

tipc: check return value of nlmsg_new

2018-03-24 11:00:14 +01:00

node.h

tipc: transfer broadcast nacks in link state messages

2016-09-02 17:10:24 -07:00

server.c

tipc: fix memory leak in tipc_accept_from_sock()

2017-12-16 16:25:45 +01:00

server.h

tipc: fix a race condition leading to subscriber refcnt bug

2016-04-14 16:46:46 -04:00

socket.c

tipc: use lock_sock() in tipc_sk_reinit()

2019-01-09 16:16:41 +01:00

socket.h

tipc: redesign connection-level flow control

2016-05-03 15:51:16 -04:00

subscr.c

tipc: use destination length for copy string

2018-12-08 13:05:09 +01:00

subscr.h

tipc: add subscription refcount to avoid invalid delete

2017-06-17 06:41:57 +02:00

sysctl.c

…

udp_media.c

tipc: compare remote and local protocols in tipc_udp_enable()

2019-01-09 16:16:41 +01:00

udp_media.h

tipc: add UDP remoteip dump to netlink API

2016-08-26 21:38:41 -07:00