iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Eric Dumazet d0ea2b1250 ipv4: fix uninit-value in ip_route_output_key_hash_rcu() 
syzbot complained that res.type could be used while not initialized.

Using RTN_UNSPEC as initial value seems better than using garbage.

BUG: KMSAN: uninit-value in __mkroute_output net/ipv4/route.c:2200 [inline]
BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x31f0/0x3940 net/ipv4/route.c:2493
CPU: 1 PID: 12207 Comm: syz-executor0 Not tainted 4.16.0+ #81
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 __mkroute_output net/ipv4/route.c:2200 [inline]
 ip_route_output_key_hash_rcu+0x31f0/0x3940 net/ipv4/route.c:2493
 ip_route_output_key_hash net/ipv4/route.c:2322 [inline]
 __ip_route_output_key include/net/route.h:126 [inline]
 ip_route_output_flow+0x1eb/0x3c0 net/ipv4/route.c:2577
 raw_sendmsg+0x1861/0x3ed0 net/ipv4/raw.c:653
 inet_sendmsg+0x48d/0x740 net/ipv4/af_inet.c:764
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg net/socket.c:640 [inline]
 SYSC_sendto+0x6c3/0x7e0 net/socket.c:1747
 SyS_sendto+0x8a/0xb0 net/socket.c:1715
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455259
RSP: 002b:00007fdc0625dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fdc0625e6d4 RCX: 0000000000455259
RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000

Local variable description: ----res.i.i@ip_route_output_flow
Variable was created at:
 ip_route_output_flow+0x75/0x3c0 net/ipv4/route.c:2576
 raw_sendmsg+0x1861/0x3ed0 net/ipv4/raw.c:653

Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-04-07 22:32:31 -04:00
..
6lowpan
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
9p
virtio: bugfixes
2018-02-15 14:29:27 -08:00
802
treewide: setup_timer() -> timer_setup()
2017-11-21 15:57:07 -08:00
8021q
vlan: also check phy_driver ts_info for vlan's real device
2018-04-01 20:53:50 -04:00
appletalk
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
atm
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
ax25
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
batman-adv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-04-01 19:49:34 -04:00
bluetooth
Bluetooth: Mark expected switch fall-throughs
2018-04-01 21:43:03 +03:00
bpf
bpf: fix null pointer deref in bpf_prog_test_run_xdp
2018-02-01 07:43:56 -08:00
bridge
net: bridge: disable bridge MTU auto tuning if it was set manually
2018-03-31 22:19:00 -04:00
caif
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
can
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
ceph
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
core
net: fix uninit-value in __hw_addr_add_ex()
2018-04-07 22:32:31 -04:00
dcb
…
dccp
dccp: initialize ireq->ir_mark
2018-04-07 22:32:31 -04:00
decnet
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
dns_resolver
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
dsa
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
ethernet
…
hsr
net: hsr: Convert timers to use timer_setup()
2017-10-25 13:00:27 +09:00
ieee802154
inet: frags: fix ip6frag_low_thresh boundary
2018-04-04 12:04:59 -04:00
ife
MAINTAINERS: Update Yotam's E-mail
2017-11-01 12:19:03 +09:00
ipv4
ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
2018-04-07 22:32:31 -04:00
ipv6
net/ipv6: Increment OUTxxx counters after netfilter hook
2018-04-05 22:23:43 -04:00
iucv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
kcm
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
key
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
l2tp
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
l3mdev
…
lapb
treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts
2017-11-21 16:35:54 -08:00
llc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-04-01 19:49:34 -04:00
mac80211
We have a fair number of patches, but many of them are from the
2018-03-29 16:23:26 -04:00
mac802154
net/mac802154: disambiguate mac80215 vs mac802154 trace events
2018-03-28 22:55:18 +02:00
mpls
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
ncsi
net/ncsi: check for null return from call to nla_nest_start
2018-03-27 10:38:26 -04:00
netfilter
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-04-01 19:49:34 -04:00
netlabel
net/netlabel: Add list_next_rcu() in rcu_dereference().
2017-11-18 10:32:41 +09:00
netlink
netlink: fix uninit-value in netlink_sendmsg
2018-04-07 22:32:31 -04:00
netrom
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
nfc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-02-19 18:46:11 -05:00
nsh
openvswitch: enable NSH support
2017-11-08 16:12:33 +09:00
openvswitch
ovs: Remove rtnl_lock() from ovs_exit_net()
2018-03-29 13:47:54 -04:00
packet
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
phonet
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
psample
MAINTAINERS: Update Yotam's E-mail
2017-11-01 12:19:03 +09:00
qrtr
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-06 01:20:46 -05:00
rds
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
rfkill
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
rose
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
rxrpc
rxrpc: Fix undefined packet handling
2018-04-04 11:04:08 -04:00
sched
net_sched: fix a missing idr_remove() in u32_delete_key()
2018-04-07 12:36:45 -04:00
sctp
sctp: fix unused lable warning
2018-03-29 14:38:27 -04:00
smc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-04-01 19:49:34 -04:00
strparser
strparser: Fix sign of err codes
2018-03-27 11:00:18 -04:00
sunrpc
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00
switchdev
net: bridge: Add/del switchdev object on host join/leave
2017-11-10 13:41:40 +09:00
tipc
tipc: Fix namespace violation in tipc_sk_fill_sock_diag
2018-04-04 11:54:35 -04:00
tls
tls: support for Inline tls record
2018-03-31 23:37:32 -04:00
unix
af_unix: remove redundant lockdep class
2018-04-04 11:13:40 -04:00
vmw_vsock
net: make getname() functions return length rather than use int* parameter
2018-02-12 14:15:04 -05:00
wimax
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
wireless
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
2018-03-31 23:33:04 -04:00
x25
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
xfrm
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-04-01 19:49:34 -04:00
compat.c
net: socket: add __compat_sys_...msg() helpers; remove in-kernel calls to compat syscalls
2018-04-02 20:15:20 +02:00
Kconfig
Staging/IIO patches for 4.16-rc1
2018-02-01 09:51:57 -08:00
Makefile
ipx: move Novell IPX protocol support into staging
2017-11-28 13:55:00 +01:00
socket.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-04-03 14:04:18 -07:00
sysctl_net.c
net: Drop pernet_operations::async
2018-03-27 13:18:09 -04:00