Zhengchao Shao facf99bc3a net/af_packet: check len when min_header_len equals to 0 ...

commit dc633700f00f726e027846a318c5ffeb8deaaeda upstream.

User can use AF_PACKET socket to send packets with the length of 0.
When min_header_len equals to 0, packet_snd will call __dev_queue_xmit
to send packets, and sock->type can be any type.

Reported-by: syzbot+5ea725c25d06fb9114c4@syzkaller.appspotmail.com
Fixes: fd1894224407 ("bpf: Don't redirect packets with invalid pkt_len")
Signed-off-by: Zhengchao Shao <shaozhengchao@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-09-05 10:30:12 +02:00

..

af_packet.c

net/af_packet: check len when min_header_len equals to 0

2022-09-05 10:30:12 +02:00

diag.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

internal.h

net/packet: remove data races in fanout operations

2021-04-14 14:34:38 -07:00

Kconfig

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00