Tetsuo Handa
b22801fe33
net/ieee802154: don't warn zero-sized raw_sendmsg() ...
[ Upstream commit b12e924a2f5b960373459c8f8a514f887adf5cac ]
syzbot is hitting skb_assert_len() warning at __dev_queue_xmit() [1],
for PF_IEEE802154 socket's zero-sized raw_sendmsg() request is hitting
__dev_queue_xmit() with skb->len == 0.
Since PF_IEEE802154 socket's zero-sized raw_sendmsg() request was
able to return 0, don't call __dev_queue_xmit() if packet length is 0.
----------
#include <sys/socket.h>
#include <netinet/in.h>
int main(int argc, char *argv[])
{
struct sockaddr_in addr = { .sin_family = AF_INET, .sin_addr.s_addr = htonl(INADDR_LOOPBACK) };
struct iovec iov = { };
struct msghdr hdr = { .msg_name = &addr, .msg_namelen = sizeof(addr), .msg_iov = &iov, .msg_iovlen = 1 };
sendmsg(socket(PF_IEEE802154, SOCK_RAW, 0), &hdr, 0);
return 0;
}
----------
Note that this might be a sign that commit fd1894224407c484 ("bpf: Don't
redirect packets with invalid pkt_len") should be reverted, for
skb->len == 0 was acceptable for at least PF_IEEE802154 socket.
Link: https://syzkaller.appspot.com/bug?extid=5ea725c25d06fb9114c4 [1]
Reported-by: syzbot <syzbot+5ea725c25d06fb9114c4@syzkaller.appspotmail.com>
Fixes: fd1894224407c484 ("bpf: Don't redirect packets with invalid pkt_len")
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Alexander Aring <aahringo@redhat.com>
Link: https://lore.kernel.org/r/20221005014750.3685555-2-aahringo@redhat.com
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-10-26 13:15:48 +02:00
2020-01-29 10:24:22 +01:00
2022-08-25 11:09:27 +02:00
2021-08-04 11:58:02 +02:00
2020-01-12 11:24:27 +01:00
2021-04-07 12:05:39 +02:00
2020-10-01 20:40:12 +02:00
2022-03-16 12:49:00 +01:00
2022-03-16 12:49:01 +01:00
2022-10-26 13:15:46 +02:00
2022-09-15 12:39:46 +02:00
2021-09-22 11:43:09 +02:00
2022-10-26 13:15:46 +02:00
2020-11-10 10:23:59 +01:00
2022-09-05 10:23:55 +02:00
2022-03-08 19:00:59 +01:00
2021-09-22 11:43:09 +02:00
2021-07-28 09:14:27 +02:00
2018-07-22 14:27:39 +02:00
2020-04-13 10:32:53 +02:00
2020-01-12 11:24:19 +01:00
2021-05-22 10:40:20 +02:00
2022-10-26 13:15:48 +02:00
2022-10-26 13:15:45 +02:00
2022-08-25 11:09:20 +02:00
2017-05-25 15:44:41 +02:00
2018-09-15 09:43:01 +02:00
2020-12-11 13:37:56 +01:00
2019-04-17 08:36:44 +02:00
2022-09-05 10:23:54 +02:00
2022-06-25 11:45:19 +02:00
2021-02-10 09:09:25 +01:00
2022-03-28 08:06:06 +02:00
2022-10-26 13:15:39 +02:00
2022-09-15 12:39:45 +02:00
2021-03-17 16:10:13 +01:00
2021-01-12 19:49:01 +01:00
2022-09-28 10:55:45 +02:00
2022-01-27 08:47:42 +01:00
2022-05-18 09:15:43 +02:00
2021-07-28 09:14:27 +02:00
2022-06-14 16:52:31 +02:00
2022-10-26 13:15:45 +02:00
2022-04-27 13:14:10 +02:00
2022-01-11 13:38:12 +01:00
2021-03-30 14:41:42 +02:00
2022-10-26 13:15:40 +02:00
2020-01-12 11:24:23 +01:00
2022-09-05 10:23:54 +02:00
2022-06-14 16:52:33 +02:00
2022-09-15 12:39:46 +02:00
2022-06-14 16:52:32 +02:00
2018-04-29 11:32:02 +02:00
2022-09-15 12:39:46 +02:00
2022-09-15 12:39:46 +02:00
2022-01-27 08:47:41 +01:00
2022-08-25 11:09:29 +02:00
2022-09-15 12:39:44 +02:00
2022-04-20 09:06:38 +02:00
2022-10-26 13:15:45 +02:00
2021-06-30 08:49:12 -04:00
2021-08-04 11:58:01 +02:00
2022-09-05 10:23:55 +02:00
b22801fe33